Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade http-proxy-middleware from 0.17.4 to 0.20.0 #2

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade http-proxy-middleware from 0.17.4 to 0.20.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 7 versions ahead of your current version.
  • The recommended version was released 6 months ago, on 2019-09-03.

The recommended version fixes:

Severity Issue Exploit Maturity
Regular Expression Denial of Service (ReDoS)
npm:braces:20180219
Proof of Concept
Release notes
Package name: http-proxy-middleware from http-proxy-middleware GitHub release notes
Commit messages
Package name: http-proxy-middleware
  • 3b97308 fix(ws): internal server upgrade (#357)
  • 616f60f Dependencies update (#352)
  • c70200e fix(ws): fix concurrent ws requests (#344)
  • 021b03f chore(dependencies): update micromatch@4 and dev dependencies (#342)
  • 0347c43 ci(travis): use xenial (#341)
  • b13302c refactor: remove options `proxyHost` and `proxyTable` (BREAKING CHANGE) (#332)
  • a30a74b Merge pull request #328 from chimurai/ts
  • 5dd8971 ci(travis-ci): build stages
  • caa2017 refactor: migrate to typescript
  • 721dc63 ci(coverage): replace istanbul with nyc (#325)
  • 80fc9e8 ci(node): drop node v4 and v5
  • 9f8a292 chore: housekeeping
  • 6422977 chore(package.json): bump 0.19.1
  • 357c58f chore(dependencies): update dependencies
  • a7a2346 style(prettier): add prettier config
  • 58548ef style(prettier): use prettier
  • 9b9d080 ci: node 10 and 11
  • 1f9bd21 docs: context matching note (#142)
  • ab485dd fix(log): Handle case when error code is missing (#303)
  • 029c99d docs: fix headings & syntax highlighting (#313)
  • bb59c66 chore(package.json): bump 0.19.0 (#294)
  • 0497805 Bump http-proxy version to 1.17.0 (#261)
  • 7a5bf5e docs: update github templates
  • 952c1af chore(package.json): bump v0.18.0

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[//]: # (snyk:metadata:{"dependencies":[{"name":"http-proxy-middleware","from":"0.17.4","to":"0.20.0"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/saurabharch/project/659499ce-91fe-47f9-8c41-10b020cd1443?utm_source=github&utm_medium=upgrade-pr","projectPublicId":"659499ce-91fe-47f9-8c41-10b020cd1443","env":"prod","prType":"upgrade","vulns":["npm:braces:20180219"],"issuesToFix":[{"issueId":"npm:braces:20180219","severity":"low","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"proof-of-concept"}],"upgrade":["npm:braces:20180219"],"upgradeInfo":{"versionsDiff":7,"publishedDate":"2019-09-03T19:56:26.579Z"},"templateVariants":[],"hasFixes":true,"isMajorUpgrade":false,"isBreakingChange":false})

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant