Quark is a cross-platform, integrated development environment for rapidly building - functional , prototypal projects, written in HTML, CSS and JavaScript with native desktop app like capabilities.
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
------------
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/nishkalkashyap/project/1f69bd6d-330a-4f30-ac57-14a5ddb67367?utm_source=github&utm_medium=referral&page=fix-pr)
🛠 [Adjust project settings](https://app.snyk.io/org/nishkalkashyap/project/1f69bd6d-330a-4f30-ac57-14a5ddb67367?utm_source=github&utm_medium=referral&page=fix-pr/settings)
📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities)
[//]: # (snyk:metadata:{"prId":"a0bb7a51-ad0a-4f29-bc3c-a7fa75f00c29","prPublicId":"a0bb7a51-ad0a-4f29-bc3c-a7fa75f00c29","dependencies":[{"name":"asar","from":"2.1.0","to":"3.2.0"},{"name":"ionic","from":"4.12.0","to":"5.4.16"}],"packageManager":"npm","projectPublicId":"1f69bd6d-330a-4f30-ac57-14a5ddb67367","projectUrl":"https://app.snyk.io/org/nishkalkashyap/project/1f69bd6d-330a-4f30-ac57-14a5ddb67367?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-ANSIREGEX-1583908","SNYK-JS-DOTPROP-543489","SNYK-JS-GOT-2932019","SNYK-JS-HTTPSPROXYAGENT-469131","SNYK-JS-INFLIGHT-6095116","SNYK-JS-INI-1048974","SNYK-JS-LODASH-1018905","SNYK-JS-LODASH-1040724","SNYK-JS-LODASH-567746","SNYK-JS-LODASH-608086","SNYK-JS-MINIMATCH-3050818","SNYK-JS-MINIMIST-2429795","SNYK-JS-MINIMIST-559764","SNYK-JS-NETMASK-1089716","SNYK-JS-NETMASK-6056519","SNYK-JS-SEMVER-3247795","SNYK-JS-TAR-1536528","SNYK-JS-TAR-1536531","SNYK-JS-TAR-1536758","SNYK-JS-TAR-1579147","SNYK-JS-TAR-1579152","SNYK-JS-TAR-1579155","SNYK-JS-TREEKILL-536781","SNYK-JS-WS-1296835","npm:debug:20170905"],"upgrade":["SNYK-JS-ANSIREGEX-1583908","SNYK-JS-DOTPROP-543489","SNYK-JS-GOT-2932019","SNYK-JS-HTTPSPROXYAGENT-469131","SNYK-JS-INFLIGHT-6095116","SNYK-JS-INI-1048974","SNYK-JS-LODASH-1018905","SNYK-JS-LODASH-1040724","SNYK-JS-LODASH-567746","SNYK-JS-LODASH-608086","SNYK-JS-MINIMATCH-3050818","SNYK-JS-MINIMIST-2429795","SNYK-JS-MINIMIST-559764","SNYK-JS-NETMASK-1089716","SNYK-JS-NETMASK-6056519","SNYK-JS-SEMVER-3247795","SNYK-JS-TAR-1536528","SNYK-JS-TAR-1536531","SNYK-JS-TAR-1536758","SNYK-JS-TAR-1579147","SNYK-JS-TAR-1579152","SNYK-JS-TAR-1579155","SNYK-JS-TREEKILL-536781","SNYK-JS-WS-1296835","npm:debug:20170905"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[696,636,484,626,631,686,586,681,731,686,479,506,601,706,706,696,624,624,410,639,639,639,671,586,506],"remediationStrategy":"vuln"})
---
**Learn how to fix vulnerabilities with free interactive lessons:**
🦉 [Regular Expression Denial of Service (ReDoS)](https://learn.snyk.io/lesson/redos/?loc=fix-pr)
🦉 [Prototype Pollution](https://learn.snyk.io/lesson/prototype-pollution/?loc=fix-pr)
🦉 [Open Redirect](https://learn.snyk.io/lesson/open-redirect/?loc=fix-pr)
🦉 [More lessons are available in Snyk Learn](https://learn.snyk.io/?loc=fix-pr)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **696/1000****Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-ANSIREGEX-1583908](https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908) | Yes | Proof of Concept  | **636/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.3 | Prototype Pollution
[SNYK-JS-DOTPROP-543489](https://snyk.io/vuln/SNYK-JS-DOTPROP-543489) | Yes | Proof of Concept  | **484/1000**
**Why?** Has a fix available, CVSS 5.4 | Open Redirect
[SNYK-JS-GOT-2932019](https://snyk.io/vuln/SNYK-JS-GOT-2932019) | Yes | No Known Exploit  | **626/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.1 | Man-in-the-Middle (MitM)
[SNYK-JS-HTTPSPROXYAGENT-469131](https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131) | Yes | Proof of Concept  | **631/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.2 | Missing Release of Resource after Effective Lifetime
[SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | Yes | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-INI-1048974](https://snyk.io/vuln/SNYK-JS-INI-1048974) | Yes | Proof of Concept  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-LODASH-1018905](https://snyk.io/vuln/SNYK-JS-LODASH-1018905) | Yes | Proof of Concept  | **681/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.2 | Command Injection
[SNYK-JS-LODASH-1040724](https://snyk.io/vuln/SNYK-JS-LODASH-1040724) | Yes | Proof of Concept  | **731/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.2 | Prototype Pollution
[SNYK-JS-LODASH-567746](https://snyk.io/vuln/SNYK-JS-LODASH-567746) | Yes | Proof of Concept  | **686/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-LODASH-608086](https://snyk.io/vuln/SNYK-JS-LODASH-608086) | Yes | Proof of Concept  | **479/1000**
**Why?** Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-MINIMATCH-3050818](https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818) | Yes | No Known Exploit  | **506/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 3.7 | Prototype Pollution
[SNYK-JS-MINIMIST-2429795](https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795) | Yes | Proof of Concept  | **601/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.6 | Prototype Pollution
[SNYK-JS-MINIMIST-559764](https://snyk.io/vuln/SNYK-JS-MINIMIST-559764) | Yes | Proof of Concept  | **706/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.7 | Server-side Request Forgery (SSRF)
[SNYK-JS-NETMASK-1089716](https://snyk.io/vuln/SNYK-JS-NETMASK-1089716) | Yes | Proof of Concept  | **706/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.7 | Server-side Request Forgery (SSRF)
[SNYK-JS-NETMASK-6056519](https://snyk.io/vuln/SNYK-JS-NETMASK-6056519) | Yes | Proof of Concept  | **696/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-SEMVER-3247795](https://snyk.io/vuln/SNYK-JS-SEMVER-3247795) | Yes | Proof of Concept  | **624/1000**
**Why?** Has a fix available, CVSS 8.2 | Arbitrary File Overwrite
[SNYK-JS-TAR-1536528](https://snyk.io/vuln/SNYK-JS-TAR-1536528) | Yes | No Known Exploit  | **624/1000**
**Why?** Has a fix available, CVSS 8.2 | Arbitrary File Overwrite
[SNYK-JS-TAR-1536531](https://snyk.io/vuln/SNYK-JS-TAR-1536531) | Yes | No Known Exploit  | **410/1000**
**Why?** Has a fix available, CVSS 3.7 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-TAR-1536758](https://snyk.io/vuln/SNYK-JS-TAR-1536758) | Yes | No Known Exploit  | **639/1000**
**Why?** Has a fix available, CVSS 8.5 | Arbitrary File Write
[SNYK-JS-TAR-1579147](https://snyk.io/vuln/SNYK-JS-TAR-1579147) | Yes | No Known Exploit  | **639/1000**
**Why?** Has a fix available, CVSS 8.5 | Arbitrary File Write
[SNYK-JS-TAR-1579152](https://snyk.io/vuln/SNYK-JS-TAR-1579152) | Yes | No Known Exploit  | **639/1000**
**Why?** Has a fix available, CVSS 8.5 | Arbitrary File Write
[SNYK-JS-TAR-1579155](https://snyk.io/vuln/SNYK-JS-TAR-1579155) | Yes | No Known Exploit  | **671/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7 | Command Injection
[SNYK-JS-TREEKILL-536781](https://snyk.io/vuln/SNYK-JS-TREEKILL-536781) | Yes | Proof of Concept  | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-WS-1296835](https://snyk.io/vuln/SNYK-JS-WS-1296835) | Yes | Proof of Concept  | **506/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 3.7 | Regular Expression Denial of Service (ReDoS)
[npm:debug:20170905](https://snyk.io/vuln/npm:debug:20170905) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: asar
The new version differs by 21 commits.- db6d154 feat: give better hints when failing due to bad links (#241)
- 6c7d9f0 Merge pull request #239 from dsanders11/revert-main-commit
- cbc9cd9 Revert "chore: modernize JS in bin/asar.js"
- db163be chore: modernize JS in bin/asar.js
- a25691f docs: update README badges (#236)
- ef6d44b build: update docker images (#237)
- b1c8deb ci: use an available xcode version in CircleCI (#223)
- 94cb8bd feat: add file hashes to asar header (#221)
- 6fb376b build: do semantic-release on main
- b0415c8 build: use main branch for releases (#220)
- 6a7c3a5 chore: update deps
- c9cc0a1 fix: CreateOptions.transform should return stream or void (#195)
- 3f243e2 fix: correctly parse arguments for list --is-pack (#194)
- 1ece9c8 build(deps-dev): upgrade mocha to ^7.1.1
- 04d8c79 build(deps-dev): upgrade standard to ^14.3.3
- 49bba74 fix: enforce Node version constraint for the CLI (#193)
- 19889b6 build: work around tsd bug
- c652ec4 build: limit what actually gets packaged
- f581511 build: use a newer Node version for releases
- f1a29ba feat: require Node 10.12.0 (#191)
- 0ee4133 chore: remove AppVeyor badge
See the full diff