Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade parse-server from 2.3.2 to 2.8.0 #122

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • appengine/parse-server/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 481/1000
Why? Recently disclosed, Has a fix available, CVSS 3.7
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: parse-server The new version differs by 250 commits.
  • 8fe3265 Release 2.8.0 (#4767)
  • 95550f4 Making response.error accept a Parse.Error object as parameter (#4695)
  • fc47f9b issue(afterFind): Fixes issue when using afterFind with relations (#4752)
  • c0f86ae Adding Mongodb element to add `arrayMatches` the #4762 (#4766)
  • ad244d6 feature: User Lockout (#4749)
  • bfd0c4b chore(package): update cross-env to version 5.1.5 (#4757)
  • d36c7c7 chore(package): update uws to version 10.148.0 (#4758)
  • 1023267 fix(package): update body-parser to version 1.18.3 (#4763)
  • c0e3672 New query condition support to match all strings that starts with some other given strings (improvement: Refactor for compute samples and tests GoogleCloudPlatform/nodejs-docs-samples#3864)
  • 2c357df Fix typo: "requrest" -> "request" (#4761)
  • 3999de7 Update issue templates
  • a3e5b20 Bumps @ parse/simple-mailgun-adapter (#4753)
  • bb16414 fix(package): update mime to version 2.3.1 (#4721)
  • 0b69700 chore(package): update flow-bin to version 0.71.0 (#4746)
  • ac2695e chore(package): update deep-diff to version 1.0.0 (#4733)
  • 098d085 fix(package): update request to version 2.85.0 (#4745)
  • a1f5f37 upgrading pg-promise to 8.4.0 (#4736)
  • d48b30c fix(package): update mongodb to version 3.0.7 (#4732)
  • 3b5dff1 chore(package): update bcrypt to version 2.0.1 (#4735)
  • fad7b46 chore: Fixes issue related to flow types (#4724)
  • 04588bc Allow creation of indices on default fields (#4738)
  • b1017ac Send version for Vkontakte API (#4725)
  • ebf65bf Updates @ parse/push-adapter (#4723)
  • 22801d2 Ensure we respond with invalid password even if email is unverified (#4708)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant