Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 1 vulnerabilities #15

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 1 vulnerabilities #15

wants to merge 1 commit into from

Conversation

Raoul1996
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • demo/project/package.json
    • demo/project/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 461/1000
Why? Recently disclosed, Has a fix available, CVSS 3.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-DEBUG-3227433		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: debug The new version differs by 43 commits.
  • f073e05 Release 3.1.0
  • 2c0df9b rename `DEBUG_HIDE_TTY_DATE` to `DEBUG_HIDE_DATE`
  • dcb37b2 Merge branch '2.x'
  • 56a3853 Add `DEBUG_HIDE_TTY_DATE` env var (#486)
  • bdb7e01 remove "component" from package.json
  • c38a016 remove ReDoS regexp in %o formatter (#504)
  • 47747f3 remove `component.json`
  • a0601e5 fix
  • e7e568a ignore package-lock.json
  • fdfa0f5 Fix browser detection
  • 7cd9e53 examples: fix colors printout
  • 8d76196 Merge pull request #496 from EdwardBetts/spelling
  • daf1a7c correct spelling mistake
  • 3e1849d Release 3.0.1
  • b3ea123 Disable colors in Edge and Internet Explorer (#489)
  • 13e1d06 remove v3 discussion note for now
  • 52b894c Release 3.0.0
  • d2dd80a component: update "ms" to v2.0.0
  • 6752953 fix browser test 😵
  • f6f6213 remove `make coveralls` from travis
  • f178d86 attempt to separate the Node and Browser tests in Travis
  • d73c4ae fix `make test`
  • 402c856 fix lint
  • 87e7399 readme++

See the full diff

Package name: koa-router The new version differs by 24 commits.
  • 81dc60a 7.3.0
  • da44991 7.3.0 changelog
  • da1f9e8 update history.md for 7.2.x
  • 959072d update history.md for 7.2.x
  • 2cbeb53 Merge pull request #396 from wachunei/add-query-params
  • 9579168 Fix README formatting
  • c4348d5 README: Add Router#url() query params support description and examples
  • b381b12 Add Router#url() query params support
  • 07d0d37 Improve query string tests
  • 700be03 Add non-object params and query params test
  • 9904aa5 Add query params support tests
  • bd9cbff Update .travis.yml
  • ac9e87d Merge pull request #384 from lagden/deps
  • 1db1b18 Merge pull request #393 from jeffijoe/patch-1
  • db9c3e4 fix(readme): return next()
  • 1581e09 Merge pull request #376 from jbielick/allow-header-list
  • 171dc8d update package debug
  • afb542b update history.md for 7.2.x
  • 9c3dec9 comma-separate list of Allow header methods
  • 4633eff Merge pull request #328 from viliam-jobko/fix-routerRedirectOptionalCodeDocs
  • 83576a6 Merge pull request #348 from vkhv/patch-1
  • d3cfbe1 modern syntax
  • 69a0752 modern syntax
  • d75a165 Fixing JSDoc on redirect method to show code param as optional

See the full diff

Package name: koa-send The new version differs by 29 commits.

See the full diff

Package name: koa-static The new version differs by 25 commits.

See the full diff

Package name: koa-views The new version differs by 48 commits.
  • ebc8f27 Version 6.1.5
  • da5acc3 chore: update deps
  • dd1cf9a Merge pull request #128 from Botre/master
  • 207f704 Add include engines note
  • 16b04cb Merge pull request #127 from hcz/fixes
  • 556ca68 fix some code in readme
  • 1e9bf8c chore: release v6.1.4
  • 72e4569 Merge pull request #119 from rocketspacer/feature/make-render-available-on-response-object
  • 31eb15e Make render available on ctx.response
  • db8a41e docs: remove koa@1 warning
  • 4533ab3 chore: test only on node v8
  • 913561b Merge pull request #114 from stevermeister/patch-1
  • 8a8808e Update readme.md
  • 012c9e4 chore: release v6.1.3
  • 9fdfb03 chore: upgrade dependencies for security vulnerabilities
  • e75e477 chore: remove package-lock.json
  • ba6630c Merge pull request #112 from niftylettuce/master
  • afaf8a3 Upgraded deps, Removed peerDependency
  • 5d7cfee chore: release v6.1.2
  • 704b62a chore: update package-lock
  • 4ad364b Merge pull request #111 from niftylettuce/master
  • 1bff01a Added `pretty` support since pug deprecated this option
  • 8ac39ad chore: release v6.1.1
  • 3022784 Merge pull request #110 from niftylettuce/master

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

@snyk-bot
fix: demo/project/package.json & demo/project/package-lock.json to re…
7cad494 
…duce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-DEBUG-3227433
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@Raoul1996 @snyk-bot