Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #6

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dmitriz
Copy link
Owner

@dmitriz dmitriz commented Jan 10, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 461/1000
Why? Recently disclosed, Has a fix available, CVSS 3.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-DEBUG-3227433
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: debug The new version differs by 197 commits.
  • f073e05 Release 3.1.0
  • 2c0df9b rename `DEBUG_HIDE_TTY_DATE` to `DEBUG_HIDE_DATE`
  • dcb37b2 Merge branch '2.x'
  • 56a3853 Add `DEBUG_HIDE_TTY_DATE` env var (#486)
  • 13abeae Release 2.6.9
  • f53962e remove ReDoS regexp in %o formatter (#504)
  • bdb7e01 remove "component" from package.json
  • c38a016 remove ReDoS regexp in %o formatter (#504)
  • 47747f3 remove `component.json`
  • a0601e5 fix
  • e7e568a ignore package-lock.json
  • fdfa0f5 Fix browser detection
  • 7cd9e53 examples: fix colors printout
  • 8d76196 Merge pull request #496 from EdwardBetts/spelling
  • daf1a7c correct spelling mistake
  • 3e1849d Release 3.0.1
  • b3ea123 Disable colors in Edge and Internet Explorer (#489)
  • 13e1d06 remove v3 discussion note for now
  • 52b894c Release 3.0.0
  • d2dd80a component: update "ms" to v2.0.0
  • 6752953 fix browser test 馃樀
  • f6f6213 remove `make coveralls` from travis
  • f178d86 attempt to separate the Node and Browser tests in Travis
  • d73c4ae fix `make test`

See the full diff

Package name: npm-utils The new version differs by 67 commits.
  • 800c792 fix: test for npm 5 and update deps (#50)
  • 76e24f4 chore(deps): upgrade dependencies using next-update
  • 79fb89c chore(deps): upgrade dependencies using next-update
  • 85d4cb4 chore(deps): upgrade dependencies using next-update
  • d13a6ca chore(deps): upgrade dependencies using next-update
  • dcb4400 chore(deps): upgrade dependencies using next-update
  • 9d77c73 chore(deps): upgrade dependencies using next-update
  • dacf6f7 chore(deps): upgrade dependencies using next-update
  • 04ce968 chore(deps): upgrade dependencies using next-update
  • 154db70 chore(deps): upgrade dependencies using next-update
  • 298e2bd chore(deps): upgrade dependencies using next-update
  • 8453019 chore(deps): upgrade dependencies using next-update
  • a4658ff chore(deps): upgrade dependencies using next-update
  • 1579a9a chore(deps): upgrade dependencies using next-update
  • ba00f2e chore(deps): upgrade dependencies using next-update
  • 12645b3 chore(deps): upgrade dependencies using next-update
  • 07e100b chore(deps): upgrade dependencies using next-update
  • 89c5b65 chore(deps): upgrade dependencies using next-update
  • b29b6fb fix(setAuthToken): use publishConfig registry URL (#48)
  • 2dcfff4 chore(package): switch dependency to npm registry (#47)
  • 2c02d41 chore(deps): upgrade dependencies using next-update
  • d6c5682 chore(deps): upgrade dependencies using next-update
  • 1c65ced chore(deps): upgrade dependencies using next-update
  • e1b06f3 chore(deps): upgrade dependencies using next-update

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

馃 Regular Expression Denial of Service (ReDoS)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-DEBUG-3227433
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants