MitocGroup / recink

REciNK - Rethink Continuous Integration for JavaScript Applications
https://www.npmjs.org/package/recink
Mozilla Public License 2.0
14 stars 5 forks source link

[Snyk] Security upgrade jag from 1.0.14 to 2.0.1 #217

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 481/1000
Why? Recently disclosed, Has a fix available, CVSS 3.7
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: jag The new version differs by 9 commits.
  • 20d161c chore(package) v2.0.1
  • dc95284 feature(package) tar v4.0.1
  • e71341f chore(package) v2.0.0
  • f370fe0 feature(package) tar v3.1.5
  • 7a115e8 feature(jag) drop support of node version < 4
  • 3ae9be3 docs(license) 2017
  • ec2d19f feature(package) nyc v11.0.2
  • 5867890 feature(package) eslint v4.0.0
  • 7ff44cf docs(readme) add bizzy
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic