[Snyk] Upgrade: , , , body-parser, express, redis #2

Mustafaovais · 2024-09-22T05:51:39Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@solana/web3.js
from 1.66.2 to 1.95.3 | 112 versions ahead of your current version | a month ago
on 2024-08-21
@certusone/wormhole-sdk
from 0.9.0 to 0.10.18 | 68 versions ahead of your current version | a month ago
on 2024-08-09
@solana/spl-token
from 0.1.8 to 0.4.8 | 26 versions ahead of your current version | 2 months ago
on 2024-07-09
body-parser
from 1.20.0 to 1.20.2 | 2 versions ahead of your current version | 2 years ago
on 2023-02-22
express
from 4.18.1 to 4.19.2 | 5 versions ahead of your current version | 6 months ago
on 2024-03-25
redis
from 4.1.0 to 4.7.0 | 24 versions ahead of your current version | 2 months ago
on 2024-07-29

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	519	Proof of Concept
Improper Restriction of Operations within the Bounds of a Memory Buffer SNYK-JS-SOLANAWEB3JS-6647564	519	No Known Exploit
Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	519	Proof of Concept
Open Redirect SNYK-JS-EXPRESS-6474509	519	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-COOKIEJAR-3149984	519	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	519	Proof of Concept
Denial of Service (DoS) SNYK-JS-GRAPHQL-5905181	519	Proof of Concept

Release notes

Package name: @solana/web3.js

1.95.3 - 2024-08-21
1.95.3 (2024-08-21)

Bug Fixes
- compare pubkey values not references (#3119) (99aa3c8)
1.95.2 - 2024-07-26
1.95.2 (2024-07-26)

Bug Fixes
- correct import for getSetComputeUnitLimitInstruction helper (#2992) (a61a732)
1.95.1 - 2024-07-17
1.95.1 (2024-07-17)

Bug Fixes
- apply default memcmp encoding (base58) when not supplied (#2945) (8ea5794)
1.95.0 - 2024-07-08
1.95.0 (2024-07-08)

Features
- add iconUrl to ValidatorInfo type (#2919) (3c67d8a)
1.94.0 - 2024-06-29
1.94.0 (2024-06-29)

Features
- simulated_transaction: Add Inner Instructions (#2756) (0936673)
1.93.4 - 2024-06-28
1.93.4 (2024-06-28)

Bug Fixes
- add deprecation notice for getConfirmedSignatureForAddress2 and update other deprecation notices' validator versions (#2871) (1df9acb), closes #2859
- deprecate the getStakeActivation RPC method (#2864) (8bd58de)
1.93.3 - 2024-06-27
1.93.3 (2024-06-27)

Bug Fixes
- onProgramAccountChange() and onAccountChange() now accept an encoding (#2861) (f9b0d6d), closes #2725
1.93.2 - 2024-06-25
1.93.1 - 2024-06-22
1.93.0 - 2024-06-12
1.92.3 - 2024-06-06
1.92.2 - 2024-06-05
1.92.1 - 2024-06-04
1.92.0 - 2024-06-04
1.91.9 - 2024-06-03
1.91.8 - 2024-05-03
1.91.7 - 2024-04-19
1.91.6 - 2024-04-17
1.91.5 - 2024-04-17
1.91.4 - 2024-04-03
1.91.3 - 2024-04-01
1.91.2 - 2024-03-26
1.91.1 - 2024-03-13
1.91.0 - 2024-03-07
1.90.2 - 2024-04-01
1.90.1 - 2024-03-02
1.90.0 - 2024-02-07
1.89.2 - 2024-04-01
1.89.1 - 2024-01-15
1.89.0 - 2024-01-11
1.88.1 - 2024-04-01
1.88.0 - 2024-01-05
1.87.7 - 2024-04-01
1.87.6 - 2023-11-11
1.87.5 - 2023-11-07
1.87.4 - 2023-11-06
1.87.3 - 2023-10-26
1.87.2 - 2023-10-19
1.87.1 - 2023-10-09
1.87.0 - 2023-10-06
1.86.1 - 2024-04-01
1.86.0 - 2023-10-06
1.85.1 - 2024-04-01
1.85.0 - 2023-10-06
1.84.1 - 2024-04-01
1.84.0 - 2023-10-06
1.83.1 - 2024-04-01
1.83.0 - 2023-10-06
1.82.1 - 2024-04-01
1.82.0 - 2023-10-06
1.81.1 - 2024-04-01
1.81.0 - 2023-10-06
1.80.1 - 2024-04-01
1.80.0 - 2023-10-06
1.79.1 - 2024-04-01
1.79.0 - 2023-10-06
1.78.8 - 2024-04-01
1.78.7 - 2023-10-04
1.78.6 - 2023-10-04
1.78.5 - 2023-09-12
1.78.4 - 2023-08-10
1.78.3 - 2023-08-04
1.78.2 - 2023-07-31
1.78.1 - 2023-07-28
1.78.0 - 2023-07-07
1.77.4 - 2024-04-01
1.77.3 - 2023-05-31
1.77.2 - 2023-05-28
1.77.1 - 2023-05-25
1.77.0 - 2023-05-24
1.76.1 - 2024-04-01
1.76.0 - 2023-05-09
1.75.1 - 2024-04-01
1.75.0 - 2023-04-04
1.74.1 - 2024-04-01
1.74.0 - 2023-03-17
1.73.5 - 2024-04-01
1.73.4 - 2023-03-16
1.73.3 - 2023-02-23
1.73.2 - 2023-01-31
1.73.1 - 2023-01-31
1.73.1-pr-29195.6 - 2023-01-31
1.73.0 - 2022-12-30
1.72.1 - 2024-04-01
1.72.0 - 2022-12-24
1.71.1 - 2024-04-01
1.71.0 - 2022-12-24
1.70.4 - 2024-04-01
1.70.3 - 2022-12-20
1.70.2 - 2022-12-19
1.70.1 - 2022-12-09
1.70.1-pr-29195.5 - 2022-12-10
1.70.1-pr-29195.4 - 2022-12-10
1.70.1-pr-29195.3 - 2022-12-10
1.70.1-pr-29195.2 - 2022-12-10
1.70.1-pr-29195 - 2022-12-10
1.70.0 - 2022-12-06
1.70.0-pr-29130-2 - 2022-12-07
1.70.0-pr-29130 - 2022-12-07
1.69.1 - 2024-04-01
1.69.0 - 2022-12-03
1.68.2 - 2024-04-01
1.68.1 - 2022-12-02
1.68.0 - 2022-12-02
1.67.3 - 2024-04-01
1.67.2 - 2022-11-30
1.67.1 - 2022-11-30
1.67.0 - 2022-11-29
1.66.6 - 2024-04-01
1.66.5 - 2022-11-29
1.66.4 - 2022-11-29
1.66.3 - 2022-11-28
1.66.2 - 2022-10-21

from @solana/web3.js GitHub release notes

Package name: @certusone/wormhole-sdk

0.10.18 - 2024-08-09
0.10.17 - 2024-06-11
0.10.16 - 2024-05-23
0.10.15 - 2024-04-26
0.10.14 - 2024-04-22
0.10.13 - 2024-03-13
0.10.11 - 2024-02-19
0.10.10 - 2024-01-25
0.10.9 - 2024-01-11
0.10.9-beta.1 - 2024-01-10
0.10.9-beta.0 - 2024-01-10
0.10.8 - 2024-01-08
0.10.7 - 2023-12-20
0.10.6 - 2023-12-11
0.10.6-beta.2 - 2023-12-05
0.10.6-beta.1 - 2023-12-05
0.10.6-beta.0 - 2023-11-03
0.10.5 - 2023-10-16
0.10.5-beta.4 - 2023-10-09
0.10.5-beta.3 - 2023-10-05
0.10.5-beta.2 - 2023-10-05
0.10.5-beta.1 - 2023-10-02
0.10.5-beta.0 - 2023-10-02
0.10.4 - 2023-09-28
0.10.4-beta.0 - 2023-09-26
0.10.3 - 2023-09-15
0.10.3-beta.0 - 2023-09-08
0.10.2 - 2023-08-28
0.10.1 - 2023-01-24
0.10.0 - 2023-01-24
0.9.24 - 2023-08-25
0.9.24-beta.0 - 2023-08-10
0.9.23 - 2023-08-09
0.9.22 - 2023-07-18
0.9.21 - 2023-07-03
0.9.21-beta.0 - 2023-07-06
0.9.20 - 2023-06-28
0.9.20-beta.0 - 2023-06-26
0.9.19 - 2023-06-26
0.9.19-beta.3 - 2023-06-26
0.9.19-beta.1 - 2023-06-22
0.9.19-beta.0 - 2023-06-15
0.9.18 - 2023-05-24
0.9.18-beta.1 - 2023-05-22
0.9.18-beta.0 - 2023-05-20
0.9.17 - 2023-05-17
0.9.17-beta.0 - 2023-05-17
0.9.16 - 2023-05-03
0.9.15 - 2023-05-02
0.9.15-beta.4 - 2023-05-01
0.9.15-beta.3 - 2023-04-30
0.9.15-beta.2 - 2023-04-29
0.9.15-beta.1 - 2023-04-29
0.9.15-beta.0 - 2023-04-27
0.9.14 - 2023-04-18
0.9.13 - 2023-04-18
0.9.12 - 2023-04-04
0.9.11 - 2023-02-23
0.9.10 - 2023-02-13
0.9.9 - 2023-01-11
0.9.8 - 2022-12-22
0.9.7 - 2022-12-21
0.9.6 - 2022-12-14
0.9.5 - 2022-12-07
0.9.4 - 2022-12-01
0.9.3 - 2022-11-22
0.9.2 - 2022-11-11
0.9.1 - 2022-11-09
0.9.0 - 2022-11-01

from @certusone/wormhole-sdk GitHub release notes

Package name: @solana/spl-token

0.4.8 - 2024-07-09
0.4.7 - 2024-06-25
0.4.6 - 2024-04-19
0.4.5 - 2024-04-19
0.4.4 - 2024-04-18
0.4.3 - 2024-03-23
0.4.2 - 2024-03-22
What's new
- Publish token-group-interface v0.4.2 by @ github-actions[bot]
- Publish type-length-value v0.6.0 (#7233) by @ joncinque
0.4.1 - 2024-02-24
0.4.0 - 2024-01-29
0.3.11 - 2024-01-09
0.3.10 - 2024-01-03
0.3.9 - 2023-11-14
0.3.8 - 2023-06-01
0.3.7 - 2023-01-10
0.3.6 - 2022-10-28
0.3.5 - 2022-09-12
0.3.4 - 2022-08-25
0.3.4-alpha.0 - 2022-08-24
0.3.3 - 2022-08-24
0.3.2 - 2022-08-23
0.3.1 - 2022-08-16
0.3.0 - 2022-08-09
0.2.0 - 2022-02-17
0.2.0-alpha.2 - 2022-01-22
0.2.0-alpha.1 - 2021-12-29
0.2.0-alpha.0 - 2021-12-28
0.1.8 - 2021-08-16

from @solana/spl-token GitHub release notes

Package name: body-parser

1.20.2 - 2023-02-22
- Fix strict json error message on Node.js 19+
- deps: content-type@~1.0.5
  - perf: skip value escaping when unnecessary
- deps: raw-body@2.5.2
1.20.1 - 2022-10-06
- deps: qs@6.11.0
- perf: remove unnecessary object clone
1.20.0 - 2022-04-03
- Fix error message for json parse whitespace in strict
- Fix internal error when inflated body exceeds limit
- Prevent loss of async hooks context
- Prevent hanging when request already read
- deps: depd@2.0.0
  - Replace internal eval usage with Function constructor
  - Use instance methods on process to check for listeners
- deps: http-errors@2.0.0
  - deps: depd@2.0.0
  - deps: statuses@2.0.1
- deps: on-finished@2.4.1
- deps: qs@6.10.3
- deps: raw-body@2.5.1
  - deps: http-errors@2.0.0

from body-parser GitHub release notes

Package name: express

4.19.2 - 2024-03-25
4.19.1 - 2024-03-20
What's Changed
- Fix ci after location patch by @ wesleytodd in #5552
- fixed un-edited version in history.md for 4.19.0 by @ wesleytodd in #5556
Full Changelog: 4.19.0...4.19.1
4.19.0 - 2024-03-20
What's Changed
- fix typo in release date by @ UlisesGascon in #5527
- docs: nominating @ wesleytodd to be project captian by @ wesleytodd in #5511
- docs: loosen TC activity rules by @ wesleytodd in #5510
- Add note on how to update docs for new release by @ crandmck in #5541
- Prevent open redirect allow list bypass due to encodeurl
- Release 4.19.0 by @ wesleytodd in #5551
New Contributors
- @ crandmck made their first contribution in #5541
Full Changelog: 4.18.3...4.19.0
4.18.3 - 2024-02-29
Main Changes
- Fix routing requests without method
- deps: body-parser@1.20.2
  - Fix strict json error message on Node.js 19+
  - deps: content-type@~1.0.5
  - deps: raw-body@2.5.2
Other Changes
- Use https: protocol instead of deprecated git: protocol by @ vcsjones in #5032
- build: Node.js@16.18 and Node.js@18.12 by @ abenhamdine in #5034
- ci: update actions/checkout to v3 by @ armujahid in #5027
- test: remove unused function arguments in params by @ raksbisht in #5124
- Remove unused originalIndex from acceptParams by @ raksbisht in #5119
- Fixed typos by @ raksbisht in #5117
- examples: remove unused params by @ raksbisht in #5113
- fix: parameter str is not described in JSDoc by @ raksbisht in #5130
- fix: typos in History.md by @ raksbisht in #5131
- build : add Node.js@19.7 by @ abenhamdine in #5028
- test: remove unused function arguments in params by @ raksbisht in #5137
- use random port in test so it won't fail on already listening by @ rluvaton in #5162
- tests: use cb() instead of done() by @ kristof-low in #5233
- examples: remove multipart example by @ riddlew in #5195
- Update support Node.js@18 in the CI by @ UlisesGascon in #5490
- Fix favicon-related bug in cookie-sessions example by @ DmytroKondrashov in #5414
- Release 4.18.3 by @ UlisesGascon in #5505
New Contributors
- @ vcsjones made their first contribution in #5032
- @ abenhamdine made their first contribution in #5034
- @ armujahid made their first contribution in #5027
- @ raksbisht made their first contribution in #5124
- @ rluvaton made their first contribution in #5162
- @ kristof-low made their first contribution in #5233
- @ riddlew made their first contribution in #5195
- @ DmytroKondrashov made their first contribution in #5414
Full Changelog: 4.18.2...4.18.3
4.18.2 - 2022-10-08
- Fix regression routing a large stack in a single route
- deps: body-parser@1.20.1
  - deps: qs@6.11.0
  - perf: remove unnecessary object clone
- deps: qs@6.11.0
4.18.1 - 2022-04-29
- Fix hanging on large stack of sync routes

from express GitHub release notes

Package name: redis

4.7.0 - 2024-07-29
Enhancements
- Upgrade @ redis/client from 1.5.16 to 1.6.0
- Upgrade @ redis/json from 1.0.6 to 1.0.7
- Upgrade @ redis/search from 1.1.6 to 1.2.0
- Upgrade @ redis/time-series from 1.0.5 to 1.1.0
4.6.15 - 2024-07-02
Enhancements
- Upgrade @ redis/client from 1.5.16 to 1.5.17
4.6.14 - 2024-05-16
Enhancements
- Upgrade @ redis/client from 1.5.14 to 1.5.16
4.6.13 - 2024-02-05
4.6.12 - 2023-12-18
4.6.11 - 2023-11-20
4.6.10 - 2023-09-22
4.6.9 - 2023-09-19
4.6.8 - 2023-08-23
4.6.7 - 2023-05-31
4.6.6 - 2023-04-27
4.6.5 - 2023-02-24
4.6.4 - 2023-01-30
4.6.3 - 2023-01-28
4.6.2 - 2023-01-27
4.6.1 - 2023-01-26
4.6.0 - 2023-01-25
4.5.1 - 2022-11-24
4.5.0 - 2022-11-10
4.4.0 - 2022-11-01
4.3.1 - 2022-09-06
4.3.0 - 2022-08-22
4.2.0 - 2022-07-05
4.1.1 - 2022-06-30
4.1.0 - 2022-05-02

from redis GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @solana/web3.js from 1.66.2 to 1.95.3. See this package in npm: https://www.npmjs.com/package/@solana/web3.js - @certusone/wormhole-sdk from 0.9.0 to 0.10.18. See this package in npm: https://www.npmjs.com/package/@certusone/wormhole-sdk - @solana/spl-token from 0.1.8 to 0.4.8. See this package in npm: https://www.npmjs.com/package/@solana/spl-token - body-parser from 1.20.0 to 1.20.2. See this package in npm: https://www.npmjs.com/package/body-parser - express from 4.18.1 to 4.19.2. See this package in npm: https://www.npmjs.com/package/express - redis from 4.1.0 to 4.7.0. See this package in npm: https://www.npmjs.com/package/redis See this project in Snyk: https://app.snyk.io/org/mblack.222345/project/dbf88815-91f9-4d12-8094-d94263af7389?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: , , , body-parser, express, redis #2

[Snyk] Upgrade: , , , body-parser, express, redis #2

Mustafaovais commented Sep 22, 2024

1.95.3 (2024-08-21)

Bug Fixes

1.95.2 (2024-07-26)

Bug Fixes

1.95.1 (2024-07-17)

Bug Fixes

1.95.0 (2024-07-08)

Features

1.94.0 (2024-06-29)

Features

1.93.4 (2024-06-28)

Bug Fixes

1.93.3 (2024-06-27)

Bug Fixes

What's new

What's Changed

What's Changed

New Contributors

Main Changes

Other Changes

New Contributors

Enhancements

Enhancements

Enhancements

[Snyk] Upgrade: , , , body-parser, express, redis #2

Are you sure you want to change the base?

[Snyk] Upgrade: , , , body-parser, express, redis #2

Conversation

Mustafaovais commented Sep 22, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

1.95.3 (2024-08-21)

Bug Fixes

1.95.2 (2024-07-26)

Bug Fixes

1.95.1 (2024-07-17)

Bug Fixes

1.95.0 (2024-07-08)

Features

1.94.0 (2024-06-29)

Features

1.93.4 (2024-06-28)

Bug Fixes

1.93.3 (2024-06-27)

Bug Fixes

What's new

What's Changed

What's Changed

New Contributors

Main Changes

Other Changes

New Contributors

Enhancements

Enhancements

Enhancements