MateMalice / mail-listener2

Mail listener library for node.js. Get notification when new email arrived.
Other
9 stars 7 forks source link

[Snyk] Security upgrade mailparser from 2.7.7 to 3.0.1 #29

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 589/1000
Why? Has a fix available, CVSS 7.5
Denial of Service (DoS)
SNYK-JS-HTMLTOTEXT-571464
Yes No Known Exploit
high severity 751/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.6
Command Injection
SNYK-JS-NODEMAILER-1038834
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: mailparser The new version differs by 10 commits.
  • 9bde049 v3.0.1. Reverted licence to MIT
  • 67c822c Update package.json
  • 21e3e57 v3.0.0
  • f6e74e7 Fix invalid date checking
  • abd7e43 Fix #272: Throw TypeError for invalid input.
  • 92c0f5c Fix unhandled exception due to invalid punycode in address strings
  • 894cd1a v2.8.1
  • 9573d93 v2.8.0
  • 1ce756f added cpanel message tests
  • e24a7e7 Decode munged disposition. Fixes #244
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic