search

GroceriStar / groceristar

Organize your shopping experience(under heavy development), https://groceristar.github.io/ubersicht/ https://waffle.io/GroceriStar/groceristar
http://groceristar.herokuapp.com/
Other
33 stars 18 forks source link

[Snyk] Security upgrade loopback from 3.23.2 to 3.28.0 #779

Closed snyk-bot closed 1 year ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 823/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6		 Command Injection
SNYK-JS-NODEMAILER-1038834		 No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: loopback The new version differs by 78 commits.
  • a22d4f9 3.28.0
  • 223dd5d Merge pull request #4338 from achrinzafork/chore/update-module-lts-node14
  • fbd9783 Merge pull request #4340 from strongloop/upgrade-nodemailer
  • 6f04b61 upgrade nodemailer to greater than 6.4.16
  • ab3e159 chore: sync LoopBack 4 with Node.js v14 EOL
  • 5b61efb Merge pull request #4334 from strongloop/travis
  • e457e26 chore: add Node.js 14 to travis
  • ab2e462 Merge pull request #4318 from strongloop/bajtos-patch-1
  • f2f7332 Remove "major" and "p1" from stalebot
  • 06fcaa1 3.27.0
  • d929b57 Merge pull request #4315 from strongloop/feat/maintenance-lts
  • 58f6545 Update LTS status in README
  • cdf48b6 Merge pull request #4303 from strongloop/copyright
  • f788aae chore: update copyright year
  • 6a7fc52 Merge pull request #4290 from sujeshthekkepatt/fix/hasone-relation-error-message
  • b93187b feat: change hasone relation error message
  • 2db09a3 Merge pull request #4281 from strongloop/chore/improve-issue-templates
  • 4edcc4f chore: disable security issue reporting
  • b848bd9 Merge pull request #4283 from strongloop/fix-comma-dangle
  • aa76a19 chore: fix eslint violations
  • f2f0b3a Merge pull request #4267 from strongloop/update-dev-deps
  • 82cd668 fixup! manual fixes
  • 397d141 fixup! eslint --fix .
  • aec86cc chore: update eslint & eslint-config to latest
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic