Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 39 vulnerabilities #108

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Fix for 39 vulnerabilities #108

wants to merge 1 commit into from
+6,708 −5,620

Conversation

nicarl
Copy link
Owner

@nicarl nicarl commented Jan 6, 2025

snyk-top-banner

Snyk has created this PR to fix 39 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
critical severity Arbitrary File Write via Archive Extraction (Zip Slip)
npm:adm-zip:20180415		   899  
high severity Prototype Pollution
SNYK-JS-TYPEORM-590152		   801  
high severity Prototype Pollution
SNYK-JS-DUSTJSLINKEDIN-1089257		   751  
high severity Prototype Pollution
SNYK-JS-LODASH-567746		   731  
high severity Prototype Pollution
SNYK-JS-MONGOOSE-5777721		   726  
critical severity Prototype Pollution
SNYK-JS-HANDLEBARS-534988		   704  
high severity Prototype Pollution
SNYK-JS-ASYNC-2441827		   696  
high severity Prototype Pollution
SNYK-JS-EXPRESSFILEUPLOAD-595969		   696  
high severity Prototype Pollution
SNYK-JS-LODASH-6139239		   696  
high severity Prototype Pollution
SNYK-JS-MQUERY-1089718		   696  
high severity Prototype Poisoning
SNYK-JS-QS-3153490		   696  
high severity Prototype Pollution
SNYK-JS-INI-1048974		   686  
high severity Prototype Pollution
SNYK-JS-LODASH-450202		   686  
high severity Prototype Pollution
SNYK-JS-LODASH-608086		   686  
high severity Prototype Pollution
SNYK-JS-LODASH-73638		   686  
high severity Prototype Pollution
SNYK-JS-MIXINDEEP-450212		   686  
high severity Prototype Pollution
SNYK-JS-MQUERY-1050858		   686  
high severity Prototype Pollution
SNYK-JS-SETVALUE-1540541		   686  
high severity Prototype Pollution
SNYK-JS-SETVALUE-450213		   686  
high severity Prototype Pollution
SNYK-JS-Y18N-1021887		   686  
high severity Prototype Pollution
SNYK-JS-MONGOOSE-2961688		   671  
medium severity Prototype Pollution
SNYK-JS-HANDLEBARS-567742		   646  
medium severity Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873		   646  
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		   644  
medium severity Prototype Pollution
npm:lodash:20180130		   636  
high severity Prototype Pollution
SNYK-JS-AJV-584908		   619  
medium severity Prototype Pollution
SNYK-JS-HANDLEBARS-1279029		   601  
medium severity Prototype Pollution
SNYK-JS-JQUERY-174006		   601  
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764		   601  
medium severity Prototype Pollution
SNYK-JS-MONGOOSE-1086688		   601  
medium severity Prototype Pollution
SNYK-JS-MPATH-1577289		   601  
medium severity Prototype Pollution
SNYK-JS-YARGSPARSER-560381		   601  
high severity Prototype Pollution
SNYK-JS-UNSETVALUE-2400660		   589  
medium severity Prototype Pollution
SNYK-JS-XML2JS-5414874		   586  
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-173692		   579  
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-174183		   579  
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-469063		   579  
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		   506  
medium severity Prototype Pollution
SNYK-JS-HIGHLIGHTJS-1045326		   504  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

@snyk-bot
fix: package.json & package-lock.json to reduce vulnerabilities
8a1bb05 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:adm-zip:20180415
- https://snyk.io/vuln/SNYK-JS-TYPEORM-590152
- https://snyk.io/vuln/SNYK-JS-DUSTJSLINKEDIN-1089257
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
- https://snyk.io/vuln/SNYK-JS-MONGOOSE-5777721
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534988
- https://snyk.io/vuln/SNYK-JS-ASYNC-2441827
- https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-595969
- https://snyk.io/vuln/SNYK-JS-LODASH-6139239
- https://snyk.io/vuln/SNYK-JS-MQUERY-1089718
- https://snyk.io/vuln/SNYK-JS-QS-3153490
- https://snyk.io/vuln/SNYK-JS-INI-1048974
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
- https://snyk.io/vuln/SNYK-JS-LODASH-608086
- https://snyk.io/vuln/SNYK-JS-LODASH-73638
- https://snyk.io/vuln/SNYK-JS-MIXINDEEP-450212
- https://snyk.io/vuln/SNYK-JS-MQUERY-1050858
- https://snyk.io/vuln/SNYK-JS-SETVALUE-1540541
- https://snyk.io/vuln/SNYK-JS-SETVALUE-450213
- https://snyk.io/vuln/SNYK-JS-Y18N-1021887
- https://snyk.io/vuln/SNYK-JS-MONGOOSE-2961688
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-567742
- https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873
- https://snyk.io/vuln/SNYK-JS-JSONSCHEMA-1920922
- https://snyk.io/vuln/npm:lodash:20180130
- https://snyk.io/vuln/SNYK-JS-AJV-584908
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1279029
- https://snyk.io/vuln/SNYK-JS-JQUERY-174006
- https://snyk.io/vuln/SNYK-JS-MINIMIST-559764
- https://snyk.io/vuln/SNYK-JS-MONGOOSE-1086688
- https://snyk.io/vuln/SNYK-JS-MPATH-1577289
- https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381
- https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660
- https://snyk.io/vuln/SNYK-JS-XML2JS-5414874
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-173692
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-174183
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-469063
- https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795
- https://snyk.io/vuln/SNYK-JS-HIGHLIGHTJS-1045326
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@nicarl @snyk-bot