Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 7 vulnerabilities #19

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 7 vulnerabilities #19

wants to merge 1 commit into from

Conversation

adrianblynch
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 619/1000
Why? Has a fix available, CVSS 8.1		 Prototype Pollution
SNYK-JS-AJV-584908		 Yes No Known Exploit
high severity 584/1000
Why? Has a fix available, CVSS 7.4		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-HAWK-2808852		 Yes No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Directory Traversal
SNYK-JS-MOMENT-2440688		 Yes No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-REDIS-1255645		 Yes No Known Exploit
medium severity 636/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.3		 Prototype Pollution
npm:hoek:20180212		 Yes Proof of Concept
medium severity 509/1000
Why? Has a fix available, CVSS 5.9		 Regular Expression Denial of Service (ReDoS)
npm:moment:20161019		 Yes No Known Exploit
low severity 399/1000
Why? Has a fix available, CVSS 3.7		 Regular Expression Denial of Service (ReDoS)
npm:moment:20170905		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: catbox-redis The new version differs by 85 commits.

See the full diff

Package name: good The new version differs by 111 commits.
  • 55acdc4 8.1.2
  • cfe701a Cleanup. Closes #607
  • fbf4b5c Update API format for hapijs.com (#601)
  • 77e4fa1 Add changelog.md (#600)
  • d39c594 Update README.md
  • 639fbec Fix a typo in the example code
  • 0e8e574 8.1.1
  • 30441d3 Add error property to server logs (#585)
  • 93d6ed0 v8.1.0
  • 91385ff Add support for request event error field
  • 4037636 Add support for logging response headers
  • ff874f7 v8.0.1
  • 8ebbac0 Added tests to prevent request id regression
  • 699c4ea request.id is not request.info.id since Hapi 17
  • fd8acbc v8.0.0
  • bc26e88 version 8.0.0-rc1
  • 87c2382 Cleanup from 9ec13aa8963106acca821ebf4c79889650366ba3
  • ce6cc96 responeTime to use request.responded. drop tailTime. (#531)
  • 9ec13aa Migrate to hapi 17, node 8 and async/await (#572)
  • d490838 v7.3.0
  • 549662a Fix for 557: Provide request headers in various payload events (#562)
  • 301307b Fix typo in API.md (#553)
  • 2c478b3 Test cleanup (#560)
  • efd3755 version 7.2.0

See the full diff

Package name: good-console The new version differs by 33 commits.

See the full diff

Package name: hapi The new version differs by 250 commits.

See the full diff

Package name: inert The new version differs by 108 commits.
  • 5f699ba 5.1.3
  • 4514a5e Don't resolve against files.relativeTo multiple times. Closes #125
  • fc143b3 Handle top level directory listing without trailing slash. Closes #119
  • 8633b9f Test using hapi 18
  • 4569240 Merge pull request #123 from Nargonath/changelog
  • b0c3901 Add changelog.md
  • d8e55cc 5.1.2
  • 08e2a10 Use new requirements config. Closes #122
  • 7cc122b 5.1.1
  • dc47399 Cleanup and update deps. Closes #121
  • 84b50b4 5.1.0
  • 302b1e0 Rename internal variable
  • c2a2703 Add path data to error events. Closes #111
  • bd48207 Refactor directory file lookup
  • f424ddb Add boom error type helpers
  • 318f5fa Refactor path normalization
  • 8745e1a Remove a closure
  • bac2072 Rethrow developer errors. Closes #103
  • f248b2e Update deps. Closes #102
  • 9f22671 Update docs
  • ceadca7 Throw when registration options are passed
  • aa3fe79 Move etagsCacheMaxSize to a server option. Closes #99
  • 5b48693 rc8
  • 988f4e4 rc7

See the full diff

Package name: orientjs The new version differs by 166 commits.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

馃 Prototype Pollution
馃 Regular Expression Denial of Service (ReDoS)
馃 Directory Traversal

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@adrianblynch @snyk-bot