account-security-quickstart-node
account-security-quickstart-node copied to clipboard
TwilioDevEd
[Snyk] Fix for 1 vulnerabilities
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5 |
Prototype Pollution SNYK-JS-QS-3153490 |
No | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: body-parser
The new version differs by 101 commits.- 424dadd 1.19.2
- 11248a2 deps: [email protected]
- 7a088eb build: [email protected]
- ecedf31 build: [email protected]
- b6bfabd build: [email protected]
- badd6b2 build: fix code coverage aggregate upload
- 96b448a build: [email protected]
- 70560b1 build: [email protected]
- 548a06f build: [email protected]
- 3b00678 deps: [email protected]
- d5acb61 build: [email protected]
- 82c8a7c tests: add limit + inflate tests
- b356758 deps: [email protected]
- c631b58 build: [email protected]
- c81a8e2 build: [email protected]
- 3c4dcb8 build: [email protected]
- d0a214b 1.19.1
- fb172d4 build: [email protected]
- c5e63cb build: [email protected]
- c6d43bd build: [email protected]
- 313ed6d build: [email protected]
- 8389b51 deps: [email protected]
- aae94b2 deps: [email protected]
- 7f84d4f deps: [email protected]
Package name: express
The new version differs by 117 commits.- 3d7fce5 4.17.3
- f906371 build: update example dependencies
- 6381bc6 deps: [email protected]
- a007863 deps: [email protected]
- e98f584 Revert "build: use [email protected] for Node.js < 4"
- a659137 tests: use strict mode
- a39e409 tests: prevent leaking changes to NODE_ENV
- 82de4de examples: fix path traversal in downloads example
- 12310c5 build: use nyc for test coverage
- 884657d examples: remove bitwise syntax for includes check
- 7511d08 build: use [email protected] for Node.js < 4
- 2585f20 tests: fix test missing assertion
- 9d09762 build: [email protected]
- 43cc56e build: clean up gitignore
- 1c7bbcc build: [email protected]
- 9cbbc8a deps: [email protected]
- 6fbc269 pref: remove unnecessary regexp for trust proxy
- 2bc734a deps: accepts@~1.3.8
- 89bb531 docs: fix typo in res.download jsdoc
- 744564f tests: add test for multiple ips in "trust proxy"
- da6cb0e tests: add range tests to res.download
- 00ad5be tests: add more tests for app.request & app.response
- 141914e tests: fix tests that did not bubble errors
- bd4fdfe tests: remove global dependency on should
Package name: qs
The new version differs by 18 commits.- f92ddb5 v6.10.3
- d9e9529 [Dev Deps] update `eslint`
- 8b4cc14 [Fix] `parse`: ignore `__proto__` keys
- ad63d36 [actions] reuse common workflows
- c028385 [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `object-inspect`, `tape`
- 0a1d3e8 [Robustness] `stringify`: avoid relying on a global `undefined`
- 408ff95 v6.10.2
- 3cea04d [Dev Deps] update `@ ljharb/eslint-config`
- 28fba8f [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `tape`
- 9aee773 [Fix] `stringify`: actually fix cyclic references
- 24c19cc [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `safe-publish-latest`
- 5dbeeb4 [Fix] `stringify`: avoid encoding arrayformat comma when `encodeValuesOnly = true`
- e2fd364 [actions] update codecov uploader
- 651b884 [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `aud`, `object-inspect`, `tape`
- e4a81e0 [readme] remove travis badge; add github actions/codecov badges; update URLs
- e9877e3 [actions] update workflows
- bd9e375 [Tests] clean up stringify tests slightly
- c2ae487 [Docs] add note and links for coercing primitive values
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
