loopback4-starter
loopback4-starter copied to clipboard
sourcefuse
[Snyk] Security upgrade @loopback/authentication-jwt from 0.9.0 to 0.12.7
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
671/1000 Why? Recently disclosed, Has a fix available, CVSS 7.7 |
Improper Input Validation SNYK-JS-JSONWEBTOKEN-3180020 |
No | No Known Exploit |
 |
776/1000 Why? Recently disclosed, Has a fix available, CVSS 9.8 |
Improper Authentication SNYK-JS-JSONWEBTOKEN-3180022 |
No | No Known Exploit |
 |
611/1000 Why? Recently disclosed, Has a fix available, CVSS 6.5 |
Improper Restriction of Security Token Assignment SNYK-JS-JSONWEBTOKEN-3180024 |
No | No Known Exploit |
|
626/1000 Why? Recently disclosed, Has a fix available, CVSS 6.8 |
Use of a Broken or Risky Cryptographic Algorithm SNYK-JS-JSONWEBTOKEN-3180026 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @loopback/authentication-jwt
The new version differs by 250 commits.- 06cbcba chore: publish release
- d1d1044 chore: update dependency @ commitlint/cli to ^17.4.1
- 447efda chore: update dependency puppeteer to ^19.5.0
- 375ed36 chore: update dependency casbin to ^5.20.2
- 5a5d7dc chore: update dependency @ types/passport-local to ^1.0.35
- 575fac0 chore: update dependency bson to v4.7.1
- cf47971 chore: update lerna monorepo to ^6.4.0
- 25d3710 chore: update actions/setup-node action to v3.6.0
- 0c83c8c chore: update actions/checkout action to v3.3.0
- ca6ed72 chore: update commitlint monorepo to ^17.4.0
- 810cd2c chore: update dependency ajv to ^8.12.0
- 1a2ca10 chore: do not cache Eslint
- 9975dd9 chore: update dependency write-file-atomic to v5
- 66d242a chore: update dependency testcontainers to v9
- 2382d74 chore: update dependency validate-npm-package-name to v5
- 0557132 chore: update dependency husky to ^8.0.3
- 35d0f5d chore: update dependency @ types/express-serve-static-core to ^4.17.32
- 505950c chore: update dependency http-status to ^1.6.1
- 08d65d1 chore: update dependency prom-client to ^14.1.1
- d681114 chore: update dependency @ types/morgan to ^1.9.4
- 4690117 chore: update dependency casbin to ^5.20.1
- fc29246 chore: update dependency json5 to ^2.2.3
- 1eb0e09 test: license year changes with the new year
- bb0c419 chore: update dependency casbin to ^5.20.0
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Use of a Broken or Risky Cryptographic Algorithm
