[Snyk] Upgrade: ms, debug, destroy, etag, fresh, http-errors, mime, on-finished, range-parser, statuses #44

wellcathita · 2024-09-08T07:10:00Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

ms
from 0.7.1 to 0.7.3 | 2 versions ahead of your current version | 7 years ago
on 2017-03-08
debug
from 2.2.0 to 2.6.9 | 23 versions ahead of your current version | 7 years ago
on 2017-09-22
destroy
from 1.0.4 to 1.2.0 | 3 versions ahead of your current version | 2 years ago
on 2022-03-20
etag
from 1.7.0 to 1.8.1 | 2 versions ahead of your current version | 7 years ago
on 2017-09-13
fresh
from 0.3.0 to 0.5.2 | 4 versions ahead of your current version | 7 years ago
on 2017-09-14
http-errors
from 1.3.1 to 1.8.1 | 13 versions ahead of your current version | 3 years ago
on 2021-11-14
mime
from 1.3.4 to 1.6.0 | 6 versions ahead of your current version | 7 years ago
on 2017-11-25
on-finished
from 2.3.0 to 2.4.1 | 2 versions ahead of your current version | 3 years ago
on 2022-02-22
range-parser
from 1.0.3 to 1.2.1 | 3 versions ahead of your current version | 5 years ago
on 2019-05-11
statuses
from 1.2.1 to 1.5.0 | 4 versions ahead of your current version | 6 years ago
on 2018-03-28

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) npm:fresh:20170908	506	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:debug:20170905	506	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:mime:20170907	506	No Known Exploit

Release notes

Package name: ms

0.7.3 - 2017-03-08
Patches
- Mark "options" param as optional in jsdoc: #77
- Lowercased text files: 5f0653a
- Pinned dependencies: 126d7f0
- Chore(package): update serve to version 5.0.1: #81
Credits

Huge thanks to @ Jokero for their help!
0.7.2 - 2016-10-25
Patches 💅
- Added license field to package.json file: #42
- Renamed long and short (reserved keywords): #53
- Capitalized important files: b2d9f9d
- Specified version numbers for devDependencies in package.json: abd3616
- Updated license file to the latest version: 5d53ae8
- Only upload important files to npm, instead of excluding certain ones: 2b2f02a
- Adjusted name of repository in package.json: e84f95d
- Made the package description match the repo's: 3961c12
- Added details on how to contribute: 201c805 and 73f34c3
- Fixed the description in README.md: 171f287
- Updated component file with the latest data: #45
- Proper structure for README.md: f95bf41
- Replaced HISTORY.md with Github Releases: 4002de0
- Removed Makefile in favor of npm scripts: beff285
- The main test file is now called "index.js": 4dd33d7
- Started testing in Travis CI: e1066db, 2458287 and 32063f2
- Added XO as a linting tool: #64 and d0ddfbb
- Now throwing an error if value is invalid: #52
- Added examples for converting years: #63
0.7.1 - 2015-04-20

from ms GitHub release notes

Package name: debug

2.6.9 - 2017-09-22
2.6.8 - 2017-05-18
2.6.7 - 2017-05-17
2.6.6 - 2017-04-27
2.6.5 - 2017-04-27
2.6.4 - 2017-04-20
2.6.3 - 2017-03-14
2.6.2 - 2017-03-10
2.6.1 - 2017-02-10
2.6.0 - 2016-12-29
2.5.2 - 2016-12-26
2.5.1 - 2016-12-21
2.5.0 - 2016-12-21
2.4.5 - 2016-12-18
2.4.4 - 2016-12-15
2.4.3 - 2016-12-14
2.4.2 - 2016-12-14
2.4.1 - 2016-12-14
2.4.0 - 2016-12-14
2.3.3 - 2016-11-19
2.3.2 - 2016-11-10
2.3.1 - 2016-11-10
2.3.0 - 2016-11-07
2.2.0 - 2015-05-10

from debug GitHub release notes

Package name: destroy

1.2.0 - 2022-03-20
1.2.0
1.1.1 - 2022-02-28
1.1.1
1.1.0 - 2022-01-25
1.1.0
1.0.4 - 2016-01-16
1.0.4

from destroy GitHub release notes

Package name: etag

1.8.1 - 2017-09-13
- perf: replace regular expression with substring
1.8.0 - 2017-02-19
- Use SHA1 instead of MD5 for ETag hashing
  - Improves performance for larger entities
  - Works with FIPS 140-2 OpenSSL configuration
1.7.0 - 2015-06-09
- Always include entity length in ETags for hash length extensions
- Generate non-Stats ETags using MD5 only (no longer CRC32)
- Improve stat performance by removing hashing
- Remove base64 padding in ETags to shorten
- Use MD5 instead of MD4 in weak ETags over 1KB

from etag GitHub release notes

Package name: fresh

0.5.2 - 2017-09-14
0.5.2
0.5.1 - 2017-09-12
0.5.1
0.5.0 - 2017-02-22
0.5.0
0.4.0 - 2017-02-06
0.4.0
0.3.0 - 2015-05-12
0.3.0

from fresh GitHub release notes

Package name: http-errors

from http-errors GitHub release notes

Package name: mime

1.6.0 - 2017-11-25
1.6.0
1.5.0 - 2017-11-22
1.5.0
1.4.1 - 2017-09-25
1.4.1
1.4.0 - 2017-08-28
1.4.0
1.3.6 - 2017-05-12
bump version
1.3.5 - 2017-05-11
1.3.4 - 2015-02-07

from mime GitHub release notes

Package name: on-finished

2.4.1 - 2022-02-22
- Fix error on early async hooks implementations
2.4.0 - 2022-02-21
- Prevent loss of async hooks context
2.3.0 - 2015-05-27
- Add defined behavior for HTTP CONNECT requests
- Add defined behavior for HTTP Upgrade requests
- deps: ee-first@1.1.1

from on-finished GitHub release notes

Package name: range-parser

1.2.1 - 2019-05-11
1.2.1
1.2.0 - 2016-06-01
1.2.0
1.1.0 - 2016-05-13
1.1.0
1.0.3 - 2015-10-29
1.0.3

from range-parser GitHub release notes

Package name: statuses

1.5.0 - 2018-03-28
1.5.0
1.4.0 - 2017-10-20
1.4.0
1.3.1 - 2016-11-12
1.3.1
1.3.0 - 2016-05-17
1.3.0
1.2.1 - 2015-02-01
1.2.1

from statuses GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - ms from 0.7.1 to 0.7.3. See this package in npm: https://www.npmjs.com/package/ms - debug from 2.2.0 to 2.6.9. See this package in npm: https://www.npmjs.com/package/debug - destroy from 1.0.4 to 1.2.0. See this package in npm: https://www.npmjs.com/package/destroy - etag from 1.7.0 to 1.8.1. See this package in npm: https://www.npmjs.com/package/etag - fresh from 0.3.0 to 0.5.2. See this package in npm: https://www.npmjs.com/package/fresh - http-errors from 1.3.1 to 1.8.1. See this package in npm: https://www.npmjs.com/package/http-errors - mime from 1.3.4 to 1.6.0. See this package in npm: https://www.npmjs.com/package/mime - on-finished from 2.3.0 to 2.4.1. See this package in npm: https://www.npmjs.com/package/on-finished - range-parser from 1.0.3 to 1.2.1. See this package in npm: https://www.npmjs.com/package/range-parser - statuses from 1.2.1 to 1.5.0. See this package in npm: https://www.npmjs.com/package/statuses See this project in Snyk: https://app.snyk.io/org/cathitatec12/project/994d8ac3-b6c2-44ff-ae5d-c5b052e0d996?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: ms, debug, destroy, etag, fresh, http-errors, mime, on-finished, range-parser, statuses #44

[Snyk] Upgrade: ms, debug, destroy, etag, fresh, http-errors, mime, on-finished, range-parser, statuses #44

wellcathita commented Sep 8, 2024

Patches

Credits

Patches 💅

[Snyk] Upgrade: ms, debug, destroy, etag, fresh, http-errors, mime, on-finished, range-parser, statuses #44

Are you sure you want to change the base?

[Snyk] Upgrade: ms, debug, destroy, etag, fresh, http-errors, mime, on-finished, range-parser, statuses #44

Conversation

wellcathita commented Sep 8, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

Patches

Credits

Patches 💅