search

Dima2021 / juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
https://owasp-juice.shop
MIT License
0 stars 0 forks source link

Update dependency sqlite3 to ^5.1.5 - autoclosed #197

Closed mend-for-github-com[bot] closed 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
sqlite3 ^5.0.0 -> ^5.1.5 age adoption passing confidence

By merging this PR, the issue #193 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 9.8 CVE-2022-43441

Release Notes

TryGhost/node-sqlite3 ### [`v5.1.5`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.5) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.4...v5.1.5) #### What's Changed - 🔒 Fixed code execution vulnerability due to Object coercion by [@​daniellockyer](https://togithub.com/daniellockyer) - Updated bundled SQLite to v3.41.1 by [@​daniellockyer](https://togithub.com/daniellockyer) - Fixed rpath linker option when using a custom sqlite by [@​jeromew](https://togithub.com/jeromew) in [https://github.com/TryGhost/node-sqlite3/pull/1654](https://togithub.com/TryGhost/node-sqlite3/pull/1654) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.4...v5.1.5 ### [`v5.1.4`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.4) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.3...v5.1.4) #### What's Changed - Fixed glibc compatibility by downgrading CI to Ubuntu 20 by [@​daniellockyer](https://togithub.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1664](https://togithub.com/TryGhost/node-sqlite3/pull/1664) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.3...v5.1.4 ### [`v5.1.3`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.3) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.2...v5.1.3) #### What's Changed - Updated bundled SQLite to v3.40.0 by [@​daniellockyer](https://togithub.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.2...v5.1.3 ### [`v5.1.2`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.2) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.1...v5.1.2) #### What's Changed - Updated bundled SQLite to v3.39.4 by [@​daniellockyer](https://togithub.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.1...v5.1.2 ### [`v5.1.1`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.1) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.0...v5.1.1) #### What's Changed - Added Darwin ARM64 binaries by [@​daniellockyer](https://togithub.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1594](https://togithub.com/TryGhost/node-sqlite3/pull/1594) A huge thanks to [MacStadium](https://www.macstadium.com/) for providing an M1 Mac Mini so we can offer ARM64 binaries. **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.0...v5.1.1 ### [`v5.1.0`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.0) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.11...v5.1.0) ✨ We're very excited to announce node-sqlite3's first minor release of v5, packed with features and improvements. If you encounter any problems, please open a detailed issue using the [templates](https://togithub.com/TryGhost/node-sqlite3/issues/new/choose). #### What's Changed - Updated bundled SQLite to v3.39.3 by [@​daniellockyer](https://togithub.com/daniellockyer) - Added ability to receive updates from `sqlite3_update_hook` by [@​soukand](https://togithub.com/soukand) in [https://github.com/TryGhost/node-sqlite3/pull/1267](https://togithub.com/TryGhost/node-sqlite3/pull/1267) - Added support for setting SQLite limits by [@​paulfitz](https://togithub.com/paulfitz) in [https://github.com/TryGhost/node-sqlite3/pull/1548](https://togithub.com/TryGhost/node-sqlite3/pull/1548) - Added library types file by [@​bpasero](https://togithub.com/bpasero) in [https://github.com/TryGhost/node-sqlite3/pull/1527](https://togithub.com/TryGhost/node-sqlite3/pull/1527) - Added `package-lock.json` to `.gitignore` by [@​JoelEinbinder](https://togithub.com/JoelEinbinder) in [https://github.com/TryGhost/node-sqlite3/pull/1628](https://togithub.com/TryGhost/node-sqlite3/pull/1628) - Fixed remaining method declarations by [@​alexanderfloh](https://togithub.com/alexanderfloh) in [https://github.com/TryGhost/node-sqlite3/pull/1633](https://togithub.com/TryGhost/node-sqlite3/pull/1633) - Fixed importing `sqlite3#verbose` using destructuring syntax by [@​mahdi-farnia](https://togithub.com/mahdi-farnia) in [https://github.com/TryGhost/node-sqlite3/pull/1632](https://togithub.com/TryGhost/node-sqlite3/pull/1632) #### New Contributors - [@​JoelEinbinder](https://togithub.com/JoelEinbinder) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1628](https://togithub.com/TryGhost/node-sqlite3/pull/1628) - [@​mahdi-farnia](https://togithub.com/mahdi-farnia) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1632](https://togithub.com/TryGhost/node-sqlite3/pull/1632) - [@​soukand](https://togithub.com/soukand) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1267](https://togithub.com/TryGhost/node-sqlite3/pull/1267) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.11...v5.1.0 ### [`v5.0.11`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.11) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.10...v5.0.11) #### What's Changed - Restored compatibility for Alpine 3.15 by [@​daniellockyer](https://togithub.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1626](https://togithub.com/TryGhost/node-sqlite3/pull/1626) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.10...v5.0.11 ### [`v5.0.10`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.10) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.9...v5.0.10) #### What's Changed - Updated bundled SQLite to v3.39.2 by [@​daniellockyer](https://togithub.com/daniellockyer) - Addressed CodeQL warnings by [@​bpasero](https://togithub.com/bpasero) in [https://github.com/TryGhost/node-sqlite3/pull/1614](https://togithub.com/TryGhost/node-sqlite3/pull/1614) #### New Contributors - [@​bpasero](https://togithub.com/bpasero) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1614](https://togithub.com/TryGhost/node-sqlite3/pull/1614) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.9...v5.0.10 ### [`v5.0.9`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.9) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.8...v5.0.9) #### What's Changed - Updated bundled SQLite to v3.39.1 by [@​daniellockyer](https://togithub.com/daniellockyer) - Fixed method declarations to conform with napi default for methods by [@​alexanderfloh](https://togithub.com/alexanderfloh) in [https://github.com/TryGhost/node-sqlite3/pull/1510](https://togithub.com/TryGhost/node-sqlite3/pull/1510) - Fixed propagation of async hook ids through callbacks by [@​alexanderfloh](https://togithub.com/alexanderfloh) in [https://github.com/TryGhost/node-sqlite3/pull/1511](https://togithub.com/TryGhost/node-sqlite3/pull/1511) - Updated sqlcipher homebrew CPPFLAGS location by [@​frovere](https://togithub.com/frovere) in [https://github.com/TryGhost/node-sqlite3/pull/1613](https://togithub.com/TryGhost/node-sqlite3/pull/1613) #### New Contributors - [@​alexanderfloh](https://togithub.com/alexanderfloh) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1510](https://togithub.com/TryGhost/node-sqlite3/pull/1510) - [@​frovere](https://togithub.com/frovere) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1613](https://togithub.com/TryGhost/node-sqlite3/pull/1613) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.8...v5.0.9 ### [`v5.0.8`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.8) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.7...v5.0.8) #### What's Changed - Reverted https://github.com/TryGhost/node-sqlite3/commit/5063367567fd1abe47bafc2095fb4f9090a260e3, which was causing a segfault with certain queries ([https://github.com/TryGhost/node-sqlite3/issues/1605](https://togithub.com/TryGhost/node-sqlite3/issues/1605) and [https://github.com/TryGhost/node-sqlite3/issues/1606](https://togithub.com/TryGhost/node-sqlite3/issues/1606)) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.7...v5.0.8 ### [`v5.0.7`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.7) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.6...v5.0.7) #### What's Changed - Updated bundled SQLite to v3.38.4 by [@​daniellockyer](https://togithub.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1604](https://togithub.com/TryGhost/node-sqlite3/pull/1604) - Improved performance by fetching column names once by [@​daniellockyer](https://togithub.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.6...v5.0.7 ### [`v5.0.6`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.6) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.5...v5.0.6) #### What's Changed - Updated bundled SQLite to v3.38.3 by [@​daniellockyer](https://togithub.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1593](https://togithub.com/TryGhost/node-sqlite3/pull/1593). This fixes an upstream bug in SQLite that was reported here: [https://github.com/TryGhost/node-sqlite3/issues/1589](https://togithub.com/TryGhost/node-sqlite3/issues/1589) - Added Node 18 to CI by [@​daniellockyer](https://togithub.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1587](https://togithub.com/TryGhost/node-sqlite3/pull/1587) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.5...v5.0.6 ### [`v5.0.5`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.5) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.4...v5.0.5) #### What's Changed - Fixed building on certain systems ([https://github.com/TryGhost/node-sqlite3/issues/1584](https://togithub.com/TryGhost/node-sqlite3/issues/1584)) by [@​daniellockyer](https://togithub.com/daniellockyer) - General repository maintenance by [@​daniellockyer](https://togithub.com/daniellockyer) Thank you to everyone reporting issues with building `sqlite3` or the prebuilt binaries 🙂 If you encounter an problem, please search open and closed issues for existing reports or open a new issue with as much system information as possible. **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.4...v5.0.5 ### [`v5.0.4`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.4) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.3...v5.0.4) #### What's Changed - Added prebuilt Linux musl binaries - [@​daniellockyer](https://togithub.com/daniellockyer) - Added prebuilt Linux ARM64 binaries - [@​daniellockyer](https://togithub.com/daniellockyer) - Fixed older glibc compatibility - [@​daniellockyer](https://togithub.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.3...v5.0.4 ### [`v5.0.3`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.3) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.2...v5.0.3) #### What's Changed - Updated bundled SQLite to v3.38.2 - [@​daniellockyer](https://togithub.com/daniellockyer) - Enabled math functions in compiler options - [@​kewde](https://togithub.com/kewde) - Updated `node-gyp` to v8.x - [@​daniellockyer](https://togithub.com/daniellockyer) - Re-enabled Node-API v6 builds - [@​daniellockyer](https://togithub.com/daniellockyer) - Fixed segfault of invalid toString() object by [@​kewde](https://togithub.com/kewde) in [https://github.com/TryGhost/node-sqlite3/pull/1450](https://togithub.com/TryGhost/node-sqlite3/pull/1450) - Fixed building on MacOS Monterey 12.3 - [@​daniellockyer](https://togithub.com/daniellockyer) - Replaced Python extraction script with JS by [@​xPaw](https://togithub.com/xPaw) in [https://github.com/TryGhost/node-sqlite3/pull/1570](https://togithub.com/TryGhost/node-sqlite3/pull/1570) - Switched prebuilt binary hosting to GitHub Releases - [@​daniellockyer](https://togithub.com/daniellockyer) #### Known Problems - [https://github.com/TryGhost/node-sqlite3/issues/1578](https://togithub.com/TryGhost/node-sqlite3/issues/1578) - the minimum glibc version for prebuilt binaries was bumped to 2.29. We hope to bring this back down within the next few releases but you will need to compile from source if your system ships with a lower version. - Prebuilt binaries for Linux do not work on musl systems. This should be fixed with https://github.com/TryGhost/node-sqlite3/commit/8b2cdd948a382b58162cb491f745ba9167dc7b0f but you will need to compile from source to use v5.0.3. **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.2...v5.0.3 ### [`v5.0.2`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.2) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.1...v5.0.2) - disable N-API v6 ### [`v5.0.1`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.1) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.0...v5.0.1) - dep: node-addon-api to ^3.0.0 [#​1367](https://togithub.com/mapbox/node-sqlite3/pull/1367) - bug: bad comparison of c string [#​1347](https://togithub.com/mapbox/node-sqlite3/pull/1347) - build: Install files to be deployed [#​1352](https://togithub.com/mapbox/node-sqlite3/pull/1352) - sqlite3: upgrade to 3.32.3 [#​1351](https://togithub.com/mapbox/node-sqlite3/pull/1351) - bug: worker threads crash [#​1367](https://togithub.com/mapbox/node-sqlite3/pull/1367) - bug: segfaults [#​1368](https://togithub.com/mapbox/node-sqlite3/pull/1368) - typo: broken link to MapBox site [#​1369](https://togithub.com/mapbox/node-sqlite3/pull/1369)