PayU / openapi-validator-middleware

Input validation using Swagger (Open API) and ajv
Apache License 2.0
144 stars 50 forks source link

[Snyk] Upgrade api-schema-builder from 2.0.5 to 2.0.6 #164

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade api-schema-builder from 2.0.5 to 2.0.6.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090600
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: api-schema-builder from api-schema-builder GitHub release notes
Commit messages
Package name: api-schema-builder
  • 132a9b6 fix: upgrade decimal.js from 10.2.1 to 10.3.0 (#87)
  • f588a7a Bump glob-parent from 5.1.0 to 5.1.2 (#85)
  • 82058f8 ci: fix codeql (#84)
  • 61ce579 Merge pull request #82 from PayU/fix-repo-url
  • 5549613 choe: fix release job
  • 37990a3 ci: migrate from CircleCI to GitHub actions (#81)
  • da58523 Don't skip parameter validation when parameter array is empty. (#68)
  • 6473579 Bump y18n from 4.0.0 to 4.0.3 (#79)
  • 4165d0e Added fix for basic relative URLs in servers (#67)
  • 15d8007 Bump hosted-git-info from 2.8.8 to 2.8.9 (#78)
  • 4d4906f Bump lodash from 4.17.19 to 4.17.21 (#77)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs