npm-updater icon indicating copy to clipboard operation
npm-updater copied to clipboard

[Snyk] Fix for 1 vulnerabilities

Open gxcsoccer opened this issue 3 years ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 461/1000
Why? Recently disclosed, Has a fix available, CVSS 3.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-DEBUG-3227433
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: debug The new version differs by 43 commits.
  • f073e05 Release 3.1.0
  • 2c0df9b rename `DEBUG_HIDE_TTY_DATE` to `DEBUG_HIDE_DATE`
  • dcb37b2 Merge branch '2.x'
  • 56a3853 Add `DEBUG_HIDE_TTY_DATE` env var (#486)
  • bdb7e01 remove "component" from package.json
  • c38a016 remove ReDoS regexp in %o formatter (#504)
  • 47747f3 remove `component.json`
  • a0601e5 fix
  • e7e568a ignore package-lock.json
  • fdfa0f5 Fix browser detection
  • 7cd9e53 examples: fix colors printout
  • 8d76196 Merge pull request #496 from EdwardBetts/spelling
  • daf1a7c correct spelling mistake
  • 3e1849d Release 3.0.1
  • b3ea123 Disable colors in Edge and Internet Explorer (#489)
  • 13e1d06 remove v3 discussion note for now
  • 52b894c Release 3.0.0
  • d2dd80a component: update "ms" to v2.0.0
  • 6752953 fix browser test 😵
  • f6f6213 remove `make coveralls` from travis
  • f178d86 attempt to separate the Node and Browser tests in Travis
  • d73c4ae fix `make test`
  • 402c856 fix lint
  • 87e7399 readme++

See the full diff

Package name: urllib The new version differs by 22 commits.
  • 53a32c3 Release 3.0.0
  • 20944ee 📦 NEW: Support request and response events
  • f01c264 📦 NEW: Support HttpClient with rejectUnauthorized
  • 61a915c 📦 NEW: Support options.auth
  • cb084d9 📦 NEW: Support custom lookup and checkAddress
  • cc1c854 📦 NEW: Support options.opaque = object
  • f07c9f8 📦 NEW: Support options.timing = true
  • 70a75c6 📦 NEW: Support options.compressed instead of gzip
  • 936bc01 👌 IMPROVE: Support Node.js 14
  • eb6c319 📦 NEW: Support auto retry like HttpClient2
  • b07a45e 👌 IMPROVE: Use brotli instead of deflate
  • a8876f2 🤖 TEST: Big stream timeout
  • 6b5a4f1 📦 NEW: Use request instead of fetch
  • c1218c5 🐛 FIX: Try to use Readable first
  • a67d9d1 🐛 FIX: Dont parse empty data to json
  • 2882f0e 🤖 TEST: Error cases for stream and writeStream
  • 57ccc7e 📦 NEW: Support options.streaming = true
  • f2ca7eb 📦 NEW: Support fixJSONCtlChars
  • f5390f2 📦 NEW: TS compiler both Commonjs and ESM support
  • c3cc765 📦 NEW: Support upload file by args.files
  • 70a238d 🤖 TEST: Use jest and ts
  • 26c44b7 📦 NEW: [BREAKING] Refactor impl base on undici

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

gxcsoccer avatar Jan 09 '23 21:01 gxcsoccer