Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 2 vulnerabilities #195

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

aliscco
Copy link
Owner

@aliscco aliscco commented Apr 26, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • deps/npm/node_modules/tiny-relative-date/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 619/1000
Why? Has a fix available, CVSS 8.1
Prototype Pollution
SNYK-JS-AJV-584908
Yes No Known Exploit
low severity 506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
Regular Expression Denial of Service (ReDoS)
npm:jasmine-core:20180216
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: eslint The new version differs by 148 commits.

See the full diff

Package name: jasmine The new version differs by 20 commits.
  • 33c5f8c bump version to 3.1
  • bdc7ab4 Tell Jasmine-core not to handle load errors itself
  • ea0c23e better error reporting when an invalid --reporter is specified
  • 74d3e96 bump version to 3.0
  • b8cf9aa Merge branch 'master' into 3.0-features
  • b831ccf Add --fail-fast to help message
  • 375b7aa Support stopping jasmine execution on first spec failure
  • 9aea4e9 Add ability to pass `--reporter` on the command line
  • 76f9fa2 Print full details for suite failures
  • 38d5568 Report how to re-run Jasmine with the current seed
  • 9af225e Run specs in random order by default
  • 1e5a1f6 Merge branch 'master' into 3.0-features
  • f55808f Updated node.js versions
  • ca8e39b Ignore vim swap files
  • a17e3f9 Depend on core 3.0
  • 5643389 Added an editorconfig file
  • 894f6c3 Treat suites with focused specs as failures
  • dcca51c Removed deprecated completion callback from console reporter
  • 19ca208 Update dependencies
  • 44e28d6 Removed 0.10.x compatibility code

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Compile error: InspectorProtocol.cpp:23:5: error: 'snprintf' is not a member of 'std' Prevent EMFILE
2 participants