AutolabJS / autolabcli

Command line client for AutolabJS
https://autolabjs.github.io
GNU General Public License v3.0
10 stars 10 forks source link

[Snyk] Fix for 5 vulnerabilities #135

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599
Yes No Known Exploit
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090600
Yes No Known Exploit
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601
Yes No Known Exploit
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602
Yes No Known Exploit
high severity 758/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3
Access Restriction Bypass
SNYK-JS-XMLHTTPREQUESTSSL-1255647
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: socket.io-client The new version differs by 104 commits.
  • d28cde7 chore(release): 4.0.0
  • 43613d1 fix(bundle): restore support for JS modules
  • 6abfa1f feat: add autoUnref option
  • 5902365 feat: add support for typed events
  • 78ec5a6 chore(release): 3.1.2
  • 83a65be chore: bump engine.io-client version
  • 13b32b3 fix: restore support for web workers
  • 311c5d1 chore(release): 3.1.1
  • 7a0c2b5 fix: include the path in the manager ID
  • 61afc5d fix: remove polyfill for process in the bundle
  • 47f917a fix(typings): add return types and general-case overload signatures (#1440)
  • f02ab3b fix(typings): fix the type of the "query" option (#1439)
  • be81a2c chore: point towards the master branch for the CI badge
  • 0a63a17 refactor: remove unused line
  • 5529f34 chore(release): 3.1.0
  • 5d9b4eb chore: bump socket.io-parser version
  • 13e16b9 chore: bump engine.io-client version
  • fe97243 fix(typings): make Manager#opts public (#1437)
  • 4922e39 docs: points towards the website
  • bcdd3be chore(release): 3.0.5
  • cf9fc35 chore: bump debug version
  • 53c7374 fix: emit a connect_error event upon connection failure
  • b83f89c fix(typings): make sendBuffer and receiveBuffer public
  • 8c08c5d refactor: remove global polyfill from webpack config
See the full diff
Package name: validator The new version differs by 250 commits.
  • 24b3fd3 13.6.1
  • b986f3d fix: ReDOS in isEmail and isHSL (#1651)
  • 2a3a1c3 13.6.0
  • 1fa0959 chore: add typeof utility (#1648)
  • cf403d0 fix(isMobilePhone): add Sierra Leone phone and fix Sri Lanka phone (#1558)
  • 3f70b8e feat(isPassportNumber, isIBAN, isMobilePhone): add Mozambique locale (#1604)
  • 05ceb18 isURL(): Allow URLs to have only a username in the userinfo subcomponent (#1644)
  • 9ee1b6b fix(isMobilePhone): update china zh-CN locale (#1642)
  • b82f4f2 fix(docs): typo in README.md (#1640)
  • 615547f feat(isMobilePhone): add Latvia lv-LV locale (#1638)
  • d006e08 fix(isMobilePhone): add support for new networks codes in GH (#1635)
  • c33fca6 fix(isISIN): optimization (#1633)
  • 2ef84e4 fix(isIP): validator patterns for IPv4 and IPv6 RegExp formats (#1632)
  • 67a200d feat(isPostalCode): add KR locale (#1628)
  • b65ddc5 fix: fix A-z ranges (#1625)
  • 39830a9 feat: IR passport and identityCard, respect .gitignore files (#1595)
  • 5d6db63 feat(isIPRange): add support for IP version 4 or 6 (#1594)
  • a31c116 fix: update isMobilePhone validation for en-SG (#1573)
  • 63b6162 chore: add gitter chatroom badge (#1592)
  • bb0dba6 feat(isPassportNumber): add MY locale (#1574)
  • 7989e5b feat(isLicensePlate): add support for pt-BR locale (#1588)
  • 3c771e8 feat(pt-BR): tax id, passport and license plates (#1613)
  • 418df05 fix(isMobilePhone): prevent allowing landline numbers in es-CO (#1623)
  • 6262f62 chore: improving code coverage to 100% branches (#1624)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic