[Snyk] Upgrade: , , , , mongoose, reflect-metadata, rxjs, swagger-ui-express #1

Hamza119612 · 2024-09-23T08:54:08Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@nestjs/common
from 7.0.8 to 7.6.18 | 43 versions ahead of your current version | 3 years ago
on 2021-06-17
@nestjs/core
from 7.0.8 to 7.6.18 | 43 versions ahead of your current version | 3 years ago
on 2021-06-17
@nestjs/platform-express
from 7.0.8 to 7.6.18 | 43 versions ahead of your current version | 3 years ago
on 2021-06-17
@nestjs/swagger
from 4.5.3 to 4.8.2 | 32 versions ahead of your current version | 3 years ago
on 2021-06-30
mongoose
from 5.9.10 to 5.13.22 | 99 versions ahead of your current version | 9 months ago
on 2024-01-02
reflect-metadata
from 0.1.13 to 0.2.2 | 5 versions ahead of your current version | 6 months ago
on 2024-03-29
rxjs
from 6.5.5 to 6.6.7 | 7 versions ahead of your current version | 3 years ago
on 2021-03-28
swagger-ui-express
from 4.1.4 to 4.6.3 | 10 versions ahead of your current version | a year ago
on 2023-05-05

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Prototype Pollution SNYK-JS-LODASH-6139239	591	Proof of Concept
Prototype Pollution SNYK-JS-MONGOOSE-2961688	591	Proof of Concept
Prototype Pollution SNYK-JS-MONGOOSE-5777721	591	Proof of Concept
Prototype Pollution SNYK-JS-MQUERY-1050858	591	Proof of Concept
Prototype Pollution SNYK-JS-MQUERY-1089718	591	Proof of Concept
Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	591	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	591	Proof of Concept
Remote Memory Exposure SNYK-JS-BL-608877	591	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ES5EXT-6095076	591	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	591	Proof of Concept
Code Injection SNYK-JS-LODASH-1040724	591	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	591	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	591	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIEXPRESS-6815423	591	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIEXPRESS-6815424	591	Mature
Prototype Pollution SNYK-JS-MONGOOSE-1086688	591	Proof of Concept
Prototype Pollution SNYK-JS-MPATH-1577289	591	Proof of Concept
Information Exposure SNYK-JS-NODEFETCH-2342118	591	No Known Exploit
Denial of Service SNYK-JS-NODEFETCH-674311	591	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	591	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	591	Proof of Concept
Server-Side Request Forgery (SSRF) SNYK-JS-AXIOS-1038255	591	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIDIST-2314884	591	Mature
Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIDIST-6056393	591	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	591	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	591	No Known Exploit

Release notes

Package name: @nestjs/common

from @nestjs/common GitHub release notes

Package name: @nestjs/core

from @nestjs/core GitHub release notes

Package name: @nestjs/platform-express

from @nestjs/platform-express GitHub release notes

Package name: @nestjs/swagger

4.8.2 - 2021-06-30
4.8.1 - 2021-06-18
4.8.0 - 2021-03-19
4.7.16 - 2021-03-10
4.7.15 - 2021-02-24
4.7.14 - 2021-02-24
4.7.13 - 2021-02-12
4.7.12 - 2021-01-21
4.7.11 - 2021-01-15
4.7.10 - 2021-01-12
4.7.9 - 2020-12-28
4.7.8 - 2020-12-17
4.7.7 - 2020-12-16
4.7.6 - 2020-12-14
4.7.5 - 2020-11-17
4.7.4 - 2020-11-16
4.7.3 - 2020-11-13
4.7.2 - 2020-11-10
4.7.1 - 2020-11-10
4.7.0 - 2020-11-06
4.6.1 - 2020-09-21
4.6.0 - 2020-08-20
4.5.12 - 2020-06-29
4.5.12-next.1 - 2020-07-13
4.5.11 - 2020-06-22
4.5.10 - 2020-06-08
4.5.9 - 2020-05-29
4.5.8 - 2020-05-25
4.5.7 - 2020-05-17
4.5.6 - 2020-05-14
4.5.5 - 2020-05-07
4.5.4 - 2020-05-04
4.5.3 - 2020-04-20

from @nestjs/swagger GitHub release notes

Package name: mongoose

5.13.22 - 2024-01-02
5.13.21 - 2023-10-19
5.13.20 - 2023-07-12
5.13.19 - 2023-06-22
5.13.18 - 2023-06-22
5.13.17 - 2023-04-04
5.13.16 - 2023-02-20
5.13.15 - 2022-08-22
5.13.14 - 2021-12-27
5.13.13 - 2021-11-02
5.13.12 - 2021-10-19
5.13.11 - 2021-10-12
5.13.10 - 2021-10-05
5.13.9 - 2021-09-06
5.13.8 - 2021-08-23
5.13.7 - 2021-08-11
5.13.6 - 2021-08-09
5.13.5 - 2021-07-30
5.13.4 - 2021-07-28
5.13.3 - 2021-07-16
5.13.2 - 2021-07-03
5.13.1 - 2021-07-02
5.13.0 - 2021-06-28
5.12.15 - 2021-06-25
5.12.14 - 2021-06-15
5.12.13 - 2021-06-04
5.12.12 - 2021-05-28
5.12.11 - 2021-05-24
5.12.10 - 2021-05-18
5.12.9 - 2021-05-13
5.12.8 - 2021-05-10
5.12.7 - 2021-04-29
5.12.6 - 2021-04-27
5.12.5 - 2021-04-19
5.12.4 - 2021-04-15
5.12.3 - 2021-03-31
5.12.2 - 2021-03-22
5.12.1 - 2021-03-18
5.12.0 - 2021-03-11
5.11.20 - 2021-03-11
5.11.19 - 2021-03-05
5.11.18 - 2021-02-23
5.11.17 - 2021-02-17
5.11.16 - 2021-02-12
5.11.15 - 2021-02-03
5.11.14 - 2021-01-28
5.11.13 - 2021-01-20
5.11.12 - 2021-01-14
5.11.11 - 2021-01-08
5.11.10 - 2021-01-04
5.11.9 - 2020-12-28
5.11.8 - 2020-12-14
5.11.7 - 2020-12-10
5.11.6 - 2020-12-09
5.11.5 - 2020-12-07
5.11.4 - 2020-12-04
5.11.3 - 2020-12-03
5.11.2 - 2020-12-02
5.11.1 - 2020-12-01
5.11.0 - 2020-11-30
5.10.19 - 2020-11-30
5.10.18 - 2020-11-29
5.10.17 - 2020-11-27
5.10.16 - 2020-11-25
5.10.15 - 2020-11-16
5.10.14 - 2020-11-12
5.10.13 - 2020-11-06
5.10.12 - 2020-11-04
5.10.11 - 2020-10-26
5.10.10 - 2020-10-23
5.10.9 - 2020-10-09
5.10.8 - 2020-10-05
5.10.7 - 2020-09-24
5.10.6 - 2020-09-18
5.10.5 - 2020-09-11
5.10.4 - 2020-09-09
5.10.3 - 2020-09-03
5.10.2 - 2020-08-28
5.10.1 - 2020-08-26
5.10.0 - 2020-08-14
5.9.29 - 2020-08-13
5.9.28 - 2020-08-07
5.9.27 - 2020-07-31
5.9.26 - 2020-07-27
5.9.25 - 2020-07-17
5.9.24 - 2020-07-13
5.9.23 - 2020-07-10
5.9.22 - 2020-07-06
5.9.21 - 2020-07-01
5.9.20 - 2020-06-22
5.9.19 - 2020-06-15
5.9.18 - 2020-06-05
5.9.17 - 2020-06-02
5.9.16 - 2020-05-25
5.9.15 - 2020-05-18
5.9.14 - 2020-05-13
5.9.13 - 2020-05-08
5.9.12 - 2020-05-04
5.9.11 - 2020-04-30
5.9.10 - 2020-04-20

from mongoose GitHub release notes

Package name: reflect-metadata

0.2.2 - 2024-03-29
0.2.1 - 2023-12-14
What's Changed
- Fix stack overflow crash in isProviderFor by @ rbuckton in #155
- Update main to v0.2.1 by @ rbuckton in #156
Full Changelog: v0.2.0...v0.2.1
0.2.0 - 2023-12-13
What's Changed
- Add /lite and /no-conflict exports by @ rbuckton in #144
- No dynamic evaluation in /lite mode by @ rbuckton in #149
Full Changelog: v0.1.14...v0.2.0
0.2.0-pre.0 - 2023-12-13
What's Changed
- Add /lite and /no-conflict exports by @ rbuckton in #144
Full Changelog: v0.1.14...v0.2.0-pre.0
0.1.14 - 2023-12-07
What's Changed
- Fix variable name by @ amatiasq in #109
- Bypass webpack process.env inlining by @ rbuckton in c8c06cc
New Contributors
- @ amatiasq made their first contribution in #109
Full Changelog: v0.1.13...v0.1.14
0.1.13 - 2019-01-15
Full Changelog: v0.1.12...v0.1.13

from reflect-metadata GitHub release notes

Package name: rxjs

6.6.7 - 2021-03-28
6.6.6 - 2021-02-25
6.6.4 - 2021-02-24
6.6.3 - 2020-09-06
6.6.2 - 2020-07-31
6.6.1 - 2020-07-31
6.6.0 - 2020-07-02
6.5.5 - 2020-04-03

from rxjs GitHub release notes

Package name: swagger-ui-express

4.6.3 - 2023-05-05
Support for Express 5
4.6.2 - 2023-02-27
4.6.2
4.6.1 - 2023-02-18
No content.
4.6.0 - 2022-11-07
Accept array of external JS/CSS assets
4.5.0 - 2022-07-13
No content.
4.4.0 - 2022-05-13
4.4.0
4.3.0 - 2021-12-16
No content.
4.2.0 - 2021-12-01
No content.
4.1.6 - 2020-12-22
4.1.5 - 2020-11-19
4.1.4 - 2020-03-21

from swagger-ui-express GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @nestjs/common from 7.0.8 to 7.6.18. See this package in npm: https://www.npmjs.com/package/@nestjs/common - @nestjs/core from 7.0.8 to 7.6.18. See this package in npm: https://www.npmjs.com/package/@nestjs/core - @nestjs/platform-express from 7.0.8 to 7.6.18. See this package in npm: https://www.npmjs.com/package/@nestjs/platform-express - @nestjs/swagger from 4.5.3 to 4.8.2. See this package in npm: https://www.npmjs.com/package/@nestjs/swagger - mongoose from 5.9.10 to 5.13.22. See this package in npm: https://www.npmjs.com/package/mongoose - reflect-metadata from 0.1.13 to 0.2.2. See this package in npm: https://www.npmjs.com/package/reflect-metadata - rxjs from 6.5.5 to 6.6.7. See this package in npm: https://www.npmjs.com/package/rxjs - swagger-ui-express from 4.1.4 to 4.6.3. See this package in npm: https://www.npmjs.com/package/swagger-ui-express See this project in Snyk: https://app.snyk.io/org/hamza119612/project/3b97a971-3fa5-419e-9f73-c7ccf848eeb7?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: , , , , mongoose, reflect-metadata, rxjs, swagger-ui-express #1

[Snyk] Upgrade: , , , , mongoose, reflect-metadata, rxjs, swagger-ui-express #1

Hamza119612 commented Sep 23, 2024

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

[Snyk] Upgrade: , , , , mongoose, reflect-metadata, rxjs, swagger-ui-express #1

Are you sure you want to change the base?

[Snyk] Upgrade: , , , , mongoose, reflect-metadata, rxjs, swagger-ui-express #1

Conversation

Hamza119612 commented Sep 23, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors