[Snyk] Upgrade: , , , , , , , execa, jsonpath-plus, openid-client, request, rfc4648, shelljs, stream-buffers, tar, tmp-promise, tslib, underscore, ws #118
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @types/js-yaml from 4.0.1 to 4.0.9.
See this package in npm: https://www.npmjs.com/package/@types/js-yaml
- @types/node from 10.12.0 to 10.17.60.
See this package in npm: https://www.npmjs.com/package/@types/node
- @types/request from 2.47.1 to 2.48.12.
See this package in npm: https://www.npmjs.com/package/@types/request
- @types/stream-buffers from 3.0.3 to 3.0.7.
See this package in npm: https://www.npmjs.com/package/@types/stream-buffers
- @types/tar from 4.0.3 to 4.0.5.
See this package in npm: https://www.npmjs.com/package/@types/tar
- @types/underscore from 1.8.9 to 1.11.15.
See this package in npm: https://www.npmjs.com/package/@types/underscore
- @types/ws from 6.0.1 to 6.0.4.
See this package in npm: https://www.npmjs.com/package/@types/ws
- execa from 5.0.0 to 5.1.1.
See this package in npm: https://www.npmjs.com/package/execa
- jsonpath-plus from 0.19.0 to 0.20.1.
See this package in npm: https://www.npmjs.com/package/jsonpath-plus
- openid-client from 4.1.1 to 4.9.1.
See this package in npm: https://www.npmjs.com/package/openid-client
- request from 2.88.0 to 2.88.2.
See this package in npm: https://www.npmjs.com/package/request
- rfc4648 from 1.3.0 to 1.5.3.
See this package in npm: https://www.npmjs.com/package/rfc4648
- shelljs from 0.8.4 to 0.8.5.
See this package in npm: https://www.npmjs.com/package/shelljs
- stream-buffers from 3.0.2 to 3.0.3.
See this package in npm: https://www.npmjs.com/package/stream-buffers
- tar from 6.1.9 to 6.2.1.
See this package in npm: https://www.npmjs.com/package/tar
- tmp-promise from 3.0.2 to 3.0.3.
See this package in npm: https://www.npmjs.com/package/tmp-promise
- tslib from 1.9.3 to 1.14.1.
See this package in npm: https://www.npmjs.com/package/tslib
- underscore from 1.12.1 to 1.13.7.
See this package in npm: https://www.npmjs.com/package/underscore
- ws from 7.4.6 to 7.5.10.
See this package in npm: https://www.npmjs.com/package/ws
See this project in Snyk:
https://app.snyk.io/org/roma8389/project/7873cf15-3c44-4d49-b218-ced57450efdb?utm_source=github&utm_medium=referral&page=upgrade-pr
Mega-Linter status: ❌ ERROR
See errors details in artifact Mega-Linter reports on GitHub Action page |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@types/js-yaml
from 4.0.1 to 4.0.9 | 8 versions ahead of your current version | 10 months ago
on 2023-11-07
@types/node
from 10.12.0 to 10.17.60 | 114 versions ahead of your current version | 3 years ago
on 2021-05-12
@types/request
from 2.47.1 to 2.48.12 | 13 versions ahead of your current version | 10 months ago
on 2023-11-07
@types/stream-buffers
from 3.0.3 to 3.0.7 | 4 versions ahead of your current version | 10 months ago
on 2023-11-07
@types/tar
from 4.0.3 to 4.0.5 | 2 versions ahead of your current version | 3 years ago
on 2021-07-02
@types/underscore
from 1.8.9 to 1.11.15 | 57 versions ahead of your current version | 10 months ago
on 2023-11-21
@types/ws
from 6.0.1 to 6.0.4 | 3 versions ahead of your current version | 5 years ago
on 2019-11-25
execa
from 5.0.0 to 5.1.1 | 3 versions ahead of your current version | 3 years ago
on 2021-06-04
jsonpath-plus
from 0.19.0 to 0.20.1 | 2 versions ahead of your current version | 5 years ago
on 2019-06-12
openid-client
from 4.1.1 to 4.9.1 | 21 versions ahead of your current version | 3 years ago
on 2021-10-13
request
from 2.88.0 to 2.88.2 | 1 version ahead of your current version | 5 years ago
on 2020-02-11
rfc4648
from 1.3.0 to 1.5.3 | 5 versions ahead of your current version | 10 months ago
on 2023-10-27
shelljs
from 0.8.4 to 0.8.5 | 1 version ahead of your current version | 3 years ago
on 2022-01-07
stream-buffers
from 3.0.2 to 3.0.3 | 1 version ahead of your current version | 3 months ago
on 2024-06-17
tar
from 6.1.9 to 6.2.1 | 8 versions ahead of your current version | 6 months ago
on 2024-03-21
tmp-promise
from 3.0.2 to 3.0.3 | 1 version ahead of your current version | 3 years ago
on 2021-10-26
tslib
from 1.9.3 to 1.14.1 | 8 versions ahead of your current version | 4 years ago
on 2020-10-09
underscore
from 1.12.1 to 1.13.7 | 12 versions ahead of your current version | a month ago
on 2024-07-24
ws
from 7.4.6 to 7.5.10 | 11 versions ahead of your current version | 3 months ago
on 2024-06-16
Issues fixed by the recommended upgrade:
SNYK-JS-SHELLJS-2332187
SNYK-JS-WS-7266574
SNYK-JS-AJV-584908
SNYK-JS-TAR-6476909
SNYK-JS-GOT-2932019
SNYK-JS-HTTPCACHESEMANTICS-3248783
Release notes
Package name: @types/js-yaml
-
4.0.9 - 2023-11-07
-
4.0.8 - 2023-10-18
-
4.0.7 - 2023-10-10
-
4.0.6 - 2023-09-15
-
4.0.5 - 2021-11-19
-
4.0.4 - 2021-10-22
-
4.0.3 - 2021-08-20
-
4.0.2 - 2021-07-06
-
4.0.1 - 2021-04-23
from @types/js-yaml GitHub release notesPackage name: @types/node
-
10.17.60 - 2021-05-12
-
10.17.59 - 2021-04-27
-
10.17.58 - 2021-04-15
-
10.17.57 - 2021-04-14
-
10.17.56 - 2021-03-27
-
10.17.55 - 2021-03-07
-
10.17.54 - 2021-02-19
-
10.17.53 - 2021-02-18
-
10.17.52 - 2021-02-14
-
10.17.51 - 2021-01-14
-
10.17.50 - 2020-12-23
-
10.17.49 - 2020-12-12
-
10.17.48 - 2020-11-30
-
10.17.47 - 2020-11-25
-
10.17.46 - 2020-11-19
-
10.17.45 - 2020-11-17
-
10.17.44 - 2020-10-28
-
10.17.43 - 2020-10-26
-
10.17.42 - 2020-10-21
-
10.17.41 - 2020-10-21
-
10.17.40 - 2020-10-16
-
10.17.39 - 2020-10-09
-
10.17.38 - 2020-10-08
-
10.17.37 - 2020-10-06
-
10.17.36 - 2020-10-06
-
10.17.35 - 2020-09-16
-
10.17.34 - 2020-09-15
-
10.17.33 - 2020-09-15
-
10.17.32 - 2020-09-11
-
10.17.31 - 2020-09-10
-
10.17.30 - 2020-09-08
-
10.17.29 - 2020-09-02
-
10.17.28 - 2020-07-23
-
10.17.27 - 2020-07-10
-
10.17.26 - 2020-06-09
-
10.17.25 - 2020-06-08
-
10.17.24 - 2020-05-19
-
10.17.23 - 2020-05-19
-
10.17.22 - 2020-05-19
-
10.17.21 - 2020-04-22
-
10.17.20 - 2020-04-17
-
10.17.19 - 2020-04-08
-
10.17.18 - 2020-03-30
-
10.17.17 - 2020-02-28
-
10.17.16 - 2020-02-19
-
10.17.15 - 2020-02-11
-
10.17.14 - 2020-01-28
-
10.17.13 - 2019-12-26
-
10.17.12 - 2019-12-23
-
10.17.11 - 2019-12-17
-
10.17.10 - 2019-12-17
-
10.17.9 - 2019-12-10
-
10.17.8 - 2019-12-09
-
10.17.7 - 2019-12-09
-
10.17.6 - 2019-11-25
-
10.17.5 - 2019-11-08
-
10.17.4 - 2019-11-05
-
10.17.3 - 2019-11-01
-
10.17.2 - 2019-10-30
-
10.17.1 - 2019-10-30
-
10.17.0 - 2019-10-24
-
10.14.22 - 2019-10-15
-
10.14.21 - 2019-10-08
-
10.14.20 - 2019-10-03
-
10.14.19 - 2019-09-24
-
10.14.18 - 2019-09-11
-
10.14.17 - 2019-08-30
-
10.14.16 - 2019-08-20
-
10.14.15 - 2019-08-07
-
10.14.14 - 2019-07-31
-
10.14.13 - 2019-07-17
-
10.14.12 - 2019-07-03
-
10.14.11 - 2019-07-03
-
10.14.10 - 2019-06-21
-
10.14.9 - 2019-06-11
-
10.14.8 - 2019-05-30
-
10.14.7 - 2019-05-17
-
10.14.6 - 2019-04-26
-
10.14.5 - 2019-04-19
-
10.14.4 - 2019-03-25
-
10.14.3 - 2019-03-22
-
10.14.2 - 2019-03-21
-
10.14.1 - 2019-03-12
-
10.14.0 - 2019-03-12
-
10.12.30 - 2019-03-06
-
10.12.29 - 2019-03-02
-
10.12.28 - 2019-03-02
-
10.12.27 - 2019-02-22
-
10.12.26 - 2019-02-12
-
10.12.25 - 2019-02-12
-
10.12.24 - 2019-02-08
-
10.12.23 - 2019-02-08
-
10.12.22 - 2019-02-08
-
10.12.21 - 2019-02-01
-
10.12.20 - 2019-01-30
-
10.12.19 - 2019-01-29
-
10.12.18 - 2018-12-19
-
10.12.17 - 2018-12-18
-
10.12.16 - 2018-12-18
-
10.12.15 - 2018-12-13
-
10.12.14 - 2018-12-12
-
10.12.13 - 2018-12-12
-
10.12.12 - 2018-12-03
-
10.12.11 - 2018-11-29
-
10.12.10 - 2018-11-21
-
10.12.9 - 2018-11-15
-
10.12.8 - 2018-11-15
-
10.12.7 - 2018-11-13
-
10.12.6 - 2018-11-12
-
10.12.5 - 2018-11-09
-
10.12.4 - 2018-11-09
-
10.12.3 - 2018-11-07
-
10.12.2 - 2018-11-01
-
10.12.1 - 2018-10-29
-
10.12.0 - 2018-10-15
from @types/node GitHub release notesPackage name: @types/request
-
2.48.12 - 2023-11-07
-
2.48.11 - 2023-10-18
-
2.48.10 - 2023-10-10
-
2.48.9 - 2023-09-27
-
2.48.8 - 2022-01-01
-
2.48.7 - 2021-07-28
-
2.48.6 - 2021-07-07
-
2.48.5 - 2020-05-15
-
2.48.4 - 2019-12-17
-
2.48.3 - 2019-09-09
-
2.48.2 - 2019-07-13
-
2.48.1 - 2018-11-05
-
2.48.0 - 2018-10-27
-
2.47.1 - 2018-06-15
from @types/request GitHub release notesPackage name: @types/stream-buffers
-
3.0.7 - 2023-11-07
-
3.0.6 - 2023-10-18
-
3.0.5 - 2023-09-25
-
3.0.4 - 2021-07-02
-
3.0.3 - 2019-04-24
from @types/stream-buffers GitHub release notesPackage name: @types/tar
-
4.0.5 - 2021-07-02
-
4.0.4 - 2020-11-18
-
4.0.3 - 2019-07-10
from @types/tar GitHub release notesPackage name: @types/underscore
-
1.11.15 - 2023-11-21
-
1.11.14 - 2023-11-10
-
1.11.13 - 2023-11-07
-
1.11.12 - 2023-10-18
-
1.11.11 - 2023-10-10
-
1.11.10 - 2023-10-06
-
1.11.9 - 2023-08-30
-
1.11.8 - 2023-08-25
-
1.11.7 - 2023-08-22
-
1.11.6 - 2023-07-21
-
1.11.5 - 2023-05-25
-
1.11.4 - 2021-12-01
-
1.11.3 - 2021-07-02
-
1.11.2 - 2021-04-24
-
1.11.1 - 2021-04-06
-
1.11.0 - 2021-03-02
-
1.10.24 - 2020-09-25
-
1.10.23 - 2020-09-14
-
1.10.22 - 2020-08-17
-
1.10.21 - 2020-08-11
-
1.10.20 - 2020-08-10
-
1.10.19 - 2020-08-06
-
1.10.18 - 2020-07-31
-
1.10.17 - 2020-07-29
-
1.10.16 - 2020-07-28
-
1.10.15 - 2020-07-28
-
1.10.14 - 2020-07-25
-
1.10.13 - 2020-07-24
-
1.10.12 - 2020-07-21
-
1.10.11 - 2020-07-20
-
1.10.10 - 2020-07-19
-
1.10.9 - 2020-07-15
-
1.10.8 - 2020-07-15
-
1.10.7 - 2020-07-11
-
1.10.6 - 2020-07-10
-
1.10.5 - 2020-07-07
-
1.10.4 - 2020-07-05
-
1.10.3 - 2020-07-02
-
1.10.2 - 2020-06-28
-
1.10.1 - 2020-06-18
-
1.10.0 - 2020-05-04
-
1.9.4 - 2019-11-18
-
1.9.3 - 2019-09-18
-
1.9.2 - 2019-07-01
-
1.9.1 - 2019-06-24
-
1.9.0 - 2019-06-19
-
1.8.20 - 2019-06-17
-
1.8.19 - 2019-06-12
-
1.8.18 - 2019-05-15
-
1.8.17 - 2019-05-15
-
1.8.16 - 2019-05-13
-
1.8.15 - 2019-05-13
-
1.8.14 - 2019-04-03
-
1.8.13 - 2019-03-05
-
1.8.12 - 2019-03-02
-
1.8.11 - 2019-02-28
-
1.8.10 - 2019-02-28
-
1.8.9 - 2018-08-15
from @types/underscore GitHub release notesPackage name: @types/ws
-
6.0.4 - 2019-11-25
-
6.0.3 - 2019-08-23
-
6.0.2 - 2019-08-05
-
6.0.1 - 2018-09-06
from @types/ws GitHub release notesPackage name: execa
-
5.1.1 - 2021-06-04
- Fix error message when user passes a single array argument (#468) 2b9c0e1
-
5.1.0 - 2021-06-02
- Add
-
5.0.1 - 2021-05-30
- Fix
-
5.0.0 - 2020-12-03
- Remove faulty emulated ENOENT error on Windows (#447) bdbd975
- Upgrade dependencies 5d64878
from execa GitHub release notesv5.1.0...v5.1.1
.escapedCommandproperty to the results (#466) 712bafcv5.0.1...v5.1.0
timeoutoption validation (#463) 427c5c2v5.0.0...v5.0.1
Breaking
This is only a breaking change if you depend on the exact error message.
Improvements
v4.1.0...v5.0.0
Package name: jsonpath-plus
-
0.20.1 - 2019-06-12
-
0.20.0 - 2019-06-04
-
0.19.0 - 2019-05-16
from jsonpath-plus GitHub release notesNo content.
No content.
No content.
Package name: openid-client
-
4.9.1 - 2021-10-13
- do not implicitly calculate key ids for Client instances (46e44e7), closes #379
-
4.9.0 - 2021-09-20
- update DPoP support to draft-03 (#407) (5565ee1), closes #406
-
4.8.0 - 2021-09-15
- OAuth 2.0 Pushed Authorization Requests (PAR) is now a stable feature (327f366)
-
4.7.5 - 2021-08-30
- typescript: add remaining properties from RFC7662 (#398) (166e89b)
-
4.7.4 - 2021-05-25
- typescript: add a missing PATCH method to requestResource (6b2c3ce), closes #368
-
4.7.3 - 2021-04-30
- fapi: validate ID Token's iat regardless of which channel it came from (b68b9ab)
-
4.7.2 - 2021-04-23
- typescript: add types for 4.6.0 additions (9064136)
-
4.7.1 - 2021-04-22
- typescript: add types for 4.7.0 additions (2c1d2ab)
-
4.7.0 - 2021-04-22
- add abort control over Device Flow Handle polling (#357) (f6faa68), closes #355 #356
-
4.6.0 - 2021-03-25
- added OAuth 2.0 Pushed Authorization Requests client API (e7af9f5), closes #259
-
4.5.2 - 2021-03-24
-
4.5.1 - 2021-03-15
-
4.5.0 - 2021-03-10
-
4.4.2 - 2021-03-07
-
4.4.1 - 2021-02-26
-
4.4.0 - 2021-01-29
-
4.3.0 - 2021-01-22
-
4.2.3 - 2021-01-18
-
4.2.2 - 2020-11-30
-
4.2.1 - 2020-10-27
-
4.2.0 - 2020-10-03
-
4.1.1 - 2020-09-14
from openid-client GitHub release notesBug Fixes
Features
Features
Bug Fixes
Bug Fixes
Bug Fixes
Bug Fixes
Bug Fixes
Features
Features
Package name: request
-
2.88.2 - 2020-02-11
-
2.88.0 - 2018-08-10
from request GitHub release notes2.88.0
Package name: rfc4648
-
1.5.3 - 2023-10-27
-
1.5.2 - 2022-05-30
-
1.5.1 - 2022-01-04
-
1.5.0 - 2021-05-25
-
1.4.0 - 2020-07-10
-
1.3.0 - 2019-09-25
from rfc4648 GitHub release notesv1.5.3
v1.5.2
v1.5.1
Allow modern versions of Node to use named exports when utilizing native modules support.
v1.4.0
This release ports everything over to TypeScript. There is no code size penalty (Babel + rollup.js are still awesome), and now we ship with type information.
Package name: shelljs
-
0.8.5 - 2022-01-07
-
0.8.4 - 2020-04-25
from shelljs GitHub release notesThis was a small security fix for #1058.
Small patch release to fix a circular dependency warning in node v14. See #973.
Package name: stream-buffers
-
3.0.3 - 2024-06-17
-
3.0.2 - 2018-05-21
from stream-buffers GitHub release notes3.0.3
3.0.2
Package name: tar
-
6.2.1 - 2024-03-21
-
6.2.0 - 2023-09-05
-
6.1.15 - 2023-05-17
-
6.1.14 - 2023-05-02
-
6.1.13 - 2022-12-07
-
6.1.12 - 2022-11-01
-
6.1.11 - 2021-08-26
-
6.1.10 - 2021-08-19
-
6.1.9 - 2021-08-19
from tar GitHub release notesv6.2.1
6.2.0
6.1.15
6.1.14
6.1.13 (2022-12-07)
Dependencies
cc4e0dd#343 bump minipass from 3.3.6 to 4.0.06.1.12 (2022-10-31)
Bug Fixes
57493ee#332 ensuring close event is emited after stream has ended (@ webark)b003c64#314 replace deprecated String.prototype.substr() (#314) (@ CommanderRoot, @ lukekarrys)Documentation
f129929#313 remove dead link to benchmarks (#313) (@ yetzt)c1faa9fadd examples/explanation of using tar.t (@ isaacs)6.1.11
6.1.10
6.1.9
Package name: tmp-promise
-
3.0.3 - 2021-10-26
-
3.0.2 - 2020-05-10
from tmp-promise GitHub release notesupdate dependencies, add publish script, use strict mode
Package name: tslib
-
1.14.1 - 2020-10-09
-
1.14.0 - 2020-10-06
-
1.13.0 - 2020-05-13
-
1.12.0 - 2020-05-12
-
1.11.2 - 2020-05-05
-
1.11.1 - 2020-02-27
-
1.11.0 - 2020-02-20
-
1.10.0 - 2019-06-10
-
1.9.3 - 2018-06-22
from tslib GitHub release notesPackage name: underscore
-
1.13.7 - 2024-07-24
-
1.13.6 - 2022-09-23
-
1.13.5 - 2022-09-23
-
1.13.4 - 2022-06-02
-
1.13.3 - 2022-04-23
-
1.13.2 - 2021-12-16
-
1.13.1 - 2021-04-15
-
1.13.0 - 2021-04-09
-
1.13.0-3 - 2021-03-31
-
1.13.0-2 - 2021-03-15
-
1.13.0-1 - 2021-03-11
-
1.13.0-0 - 2021-03-10
-
1.12.1 - 2021-03-15
from underscore GitHub release notesDataView bugfix, source links, dark mode and other improvements
Hotfix after 1.13.5 to remove postinstall script
Patch to add exports.require.module, plus testing updates
Patch release to address WebPack module federation issue
Patch release with improved compatibility with ExtendScript
Underscore 1.13.2 -- minor bugfixes and improved documentation
Restores the underscore.js UMD alias to git
Node.js native ESM support in main release stream, docs updates
Preview release that adds the "module" exports condition
Security fix in _.template and restored optimization in _.debounce.
Package name: ws
-
7.5.10 - 2024-06-16
- Backported e55e510 to the 7.x release line (22c2876).
-
7.5.9 - 2022-07-15
-
7.5.8 - 2022-05-26
-
7.5.7 - 2022-02-07
-
7.5.6 - 2021-11-23
-
7.5.5 - 2021-09-08
-
7.5.4 - 2021-08-28
-
7.5.3 - 2021-07-10
-
7.5.2 - 2021-07-04
-
7.5.1 - 2021-06-29
-
7.5.0 - 2021-06-16
-
7.4.6 - 2021-05-25
from ws GitHub release notesBug fixes
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"","from":"types/js-yaml","to":"types/js-yaml"},{"name":"","from":"types/node","to":"types/node"},{"name":"","from":"types/request","to":"types/request"},{"name":"","from":"types/stream-buffers","to":"types/stream-buffers"},{"name":"","from":"types/tar","to":"types/tar"},{"name":"","from":"types/underscore","to":"types/underscore"},{"name":"","from":"types/ws","to":"types/ws"},{"name":"execa","from":"5.0.0","to":"5.1.1"},{"name":"jsonpath-plus","from":"0.19.0","to":"0.20.1"},{"name":"openid-client","from":"4.1.1","to":"4.9.1"},{"name":"request","from":"2.88.0","to":"2.88.2"},{"name":"rfc4648","from":"1.3.0","to":"1.5.3"},{"name":"shelljs","from":"0.8.4","to":"0.8.5"},{"name":"stream-buffers","from":"3.0.2","to":"3.0.3"},{"name":"tar","from":"6.1.9","to":"6.2.1"},{"name":"tmp-promise","from":"3.0.2","to":"3.0.3"},{"name":"tslib","from":"1.9.3","to":"1.14.1"},{"name":"underscore","from":"1.12.1","to":"1.13.7"},{"name":"ws","from":"7.4.6","to":"7.5.10"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-SHELLJS-2332187","issue_id":"SNYK-JS-SHELLJS-2332187","priority_score":676,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.1","score":355},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Privilege Management"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-WS-7266574","issue_id":"SNYK-JS-WS-7266574","priority_score":696,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Denial of Service (DoS)"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-AJV-584908","issue_id":"SNYK-JS-AJV-584908","priority_score":619,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Prototype Pollution"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-TAR-6476909","issue_id":"SNYK-JS-TAR-6476909","priority_score":646,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.5","score":325},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Uncontrolled Resource Consumption ('Resource Exhaustion')"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-GOT-2932019","issue_id":"SNYK-JS-GOT-2932019","priority_score":484,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.4","score":270},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Open Redirect"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-HTTPCACHESEMANTICS-3248783","issue_id":"SNYK-JS-HTTPCACHESEMANTICS-3248783","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"}],"prId":"2978536b-7db2-4884-90a3-4ba6052078da","prPublicId":"2978536b-7db2-4884-90a3-4ba6052078da","packageManager":"npm","priorityScoreList":[676,696,619,646,484,586],"projectPublicId":"7873cf15-3c44-4d49-b218-ced57450efdb","projectUrl":"https://app.snyk.io/org/roma8389/project/7873cf15-3c44-4d49-b218-ced57450efdb?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-SHELLJS-2332187","SNYK-JS-WS-7266574","SNYK-JS-AJV-584908","SNYK-JS-TAR-6476909","SNYK-JS-GOT-2932019","SNYK-JS-HTTPCACHESEMANTICS-3248783"],"upgradeInfo":{"versionsDiff":8,"publishedDate":"2023-11-07T20:20:13.264Z"},"vulns":["SNYK-JS-SHELLJS-2332187","SNYK-JS-WS-7266574","SNYK-JS-AJV-584908","SNYK-JS-TAR-6476909","SNYK-JS-GOT-2932019","SNYK-JS-HTTPCACHESEMANTICS-3248783"]}'