Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 1 vulnerabilities #491

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 1 vulnerabilities #491

wants to merge 1 commit into from

Conversation

aliscco
Copy link
Owner

@aliscco aliscco commented Jun 21, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • deps/npm/node_modules/http-cache-semantics/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: eslint The new version differs by 250 commits.

See the full diff

Package name: lint-staged The new version differs by 32 commits.
  • e24aaf2 fix: parse titles for function linters
  • e862e7e docs: correct config file name
  • 309ff1c docs: restore filtering section to README
  • 4bef26e feat: add deprecation error for advanced configuration
  • e829646 refactor: remove dependency on path-is-inside
  • 767edbd refactor: remove dependency on lodash
  • c59cd9a chore: upgrade dependencies
  • 19536e3 refactor: pass unparsed commands to execa with --shell
  • 275d996 refactor: rename --silent to --quiet
  • 18acd59 docs: update README
  • 2ba6d61 test: ignore testSetup from coverage report
  • ecf9227 feat: add --shell and --quiet flags
  • 04190c8 refactor: remove advanced configuration options
  • bed9127 refactor: use execa's shell option to run commands
  • d3f6475 docs: update contributors
  • b71b9c8 refactor: warn about long arguments string only once
  • bcd52ac docs: update README
  • efe8f06 docs: print a warning when arguments length is too long based on platform
  • 2753640 docs: update README
  • 28f3c40 refactor: remove unused configuration options
  • 4db2353 test: add test for linter command exiting with code 1
  • 6d4beec test: update tests for function linters
  • 36e54a2 feat: support function linter returning array of commands
  • 9e4346f refactor: support function linters in getConfig

See the full diff

Package name: prettier-eslint-cli The new version differs by 17 commits.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

@snyk-bot
fix: deps/npm/node_modules/http-cache-semantics/package.json to reduc…
116d95e 
…e vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-SEMVER-3247795
This was referenced Nov 29, 2023
Open
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@aliscco @snyk-bot