[Snyk] Upgrade express-validator from 6.11.1 to 6.15.0

[Terreii]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade express-validator from 6.11.1 to 6.15.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2023-02-16.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: express-validator

• 6.15.0 - 2023-02-16
  

  What's Changed

  • chore(deps): bump ua-parser-js from 0.7.32 to 0.7.33 by @ dependabot in #1208
  • chore(deps): bump eta from 1.12.3 to 2.0.0 by @ dependabot in #1211
  • chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 by @ dependabot in #1210
  • feat: update to support validator 13.9.0 by @ fedeci in #1212

  Full Changelog: v6.14.3...v6.15.0

• 6.14.3 - 2023-01-20
  

  What's Changed

  • docs: fixed typo in sanitization chain example by @ ankushknr19 in #1195
  • fixed infinite recursion when the request has a field called * (#1205)

  New Contributors

  • @ ankushknr19 made their first contribution in #1195

  Full Changelog: v6.14.2...v6.14.3

• 6.14.2 - 2022-06-19
  

  What's Changed

  • correctly run .matches when passing regex object by @ tonysamperi in #1156

  New Contributors

  • @ tonysamperi made their first contribution in #1156

  Full Changelog: v6.14.1...v6.14.2

• 6.14.1 - 2022-05-22
  

  What's Changed

  • Add validationResult() for schema validation example by @ daenamkim in #1120
  • chore(deps): bump shelljs from 0.8.4 to 0.8.5 by @ dependabot in #1128
  • chore(deps): bump ajv from 6.11.0 to 6.12.6 by @ dependabot in #1129
  • chore(deps): bump prismjs from 1.25.0 to 1.27.0 by @ dependabot in #1135
  • docs: remove dependencies status badge by @ gustavohenke in #1131
  • chore(deps): bump minimist from 1.2.5 to 1.2.6 by @ dependabot in #1142
  • chore(deps): bump async from 2.6.3 to 2.6.4 by @ dependabot in #1147
  • Add missing SK postal code - #1144

  New Contributors

  • @ daenamkim made their first contribution in #1120

  Full Changelog: v6.14.0...v6.14.1

• 6.14.0 - 2021-12-11
  

  What's Changed

  • feat: update validator to 13.7 by @ fedeci in #1115
  • chore(deps): bump tmpl from 1.0.4 to 1.0.5 by @ dependabot in #1116
  • chore(deps): bump path-parse from 1.0.6 to 1.0.7 by @ dependabot in #1118
  • chore(deps): bump prismjs from 1.24.0 to 1.25.0 by @ dependabot in #1117

  Full Changelog: v6.13.0...v6.14.0

• 6.13.0 - 2021-10-12
  

  What's Changed

  • docs: warn users about bad practice by @ hariprasadkc in #1094
  • schema usage according to documentation results in Error by @ fkarg in #1095
  • v6.13 features by @ fedeci in #1091

  New Contributors

  • @ hariprasadkc made their first contribution in #1094
  • @ fkarg made their first contribution in #1095

  Full Changelog: v6.12.2...v6.13.0

• 6.12.2 - 2021-09-26
  

  Fixes:

  • #1072: add type for checkSchema function return
  • #1092, #1086: correctly allow falsy values as options in checkSchema
• 6.12.1 - 2021-07-23
  
  • #1061, #1059 - allow using readonly arrays in TypeScript
• 6.12.0 - 2021-06-14
  
  • #1047, #1049 - make withMessage actually override a custom validator's message
  • #1026, #1037 - add missing arguments of isAlphanumeric
• 6.11.1 - 2021-05-08
  Read more

from express-validator GitHub release notes

Commit messages

Package name: express-validator

• 5202222 feat: update to support validator 13.9.0 (#1212)
• 10ecbd1 deps: bump http-cache-semantics from 4.1.0 to 4.1.1 (#1210)
• 5eedc19 deps: bump eta from 1.12.3 to 2.0.0 (#1211)
• 067e908 deps: upgrade typescript to v4.3.5
• 9d05a40 deps: bump ua-parser-js from 0.7.32 to 0.7.33 (#1208)
• 4be387a 6.14.3
• 692c0f9 Fix up version + docs:version scripts
• 03c2d88 Fix infinite recursion when a field is called "*"
• d8cd95e deps: bump minimatch and recursive-readdir (#1202)
• aaa4a87 deps: bump json5 from 1.0.1 to 1.0.2 (#1201)
• d61e455 docs: fix search input when hovered
• 46c08dc docs: add algolia docsearch back
• d34b63f Docusaurus v2 (#1199)
• 8d7d7e0 gh: upgrade checkout and setup-node actions (#1197)
• 42316c3 deps: upgrade TS + lint deps (#1196)
• 2024e6e docs: update sanitization chain (#1195)
• f68baf4 deps: bump decode-uri-component from 0.2.0 to 0.2.2 (#1189)
• a946db1 deps: bump express from 4.17.1 to 4.18.2 (#1192)
• 60ac20b deps: bump qs from 6.5.2 to 6.5.3 (#1191)
• 02b69d4 Update issue template to include node.js version and runkit link
• 870ee99 Also document schemas
• 21e07e2 Add JsDocs to all public APIs
• 6715a6a docs: fix up checkSchema syntax
• 0b258a5 npm: upgrade to lockfile v2 and prune

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs