RedisAI / redisai-js

A high-performance JavaScript client for RedisAI
https://redisai.io
BSD 3-Clause "New" or "Revised" License
13 stars 4 forks source link

[Snyk] Security upgrade redis from 3.0.2 to 3.1.1 #28

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-REDIS-1255645
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: redis The new version differs by 31 commits.
  • fc28860 Bump version to 3.1.1 (#1597)
  • 2d11b6d fix #1569 - improve monitor_regex (#1595)
  • 7e77de8 Add Chat (#1594)
  • 5d3e995 Merge branch 'master' of https://github.com/NodeRedis/node-redis
  • b797cf2 add user to README.md
  • 79f34c2 Bump version to 3.1.0 (#1590)
  • 7fdc54e fix for 428e1c8a7b2322c2650294638cb1663ac5692728 - fix auth retry when redis is in loading state
  • 09f0fe8 "fix" tests
  • 428e1c8 Add support for Redis 6 `auth pass [user]` (#1508)
  • bb208d0 Add codeclimate badge (#1572)
  • 47e2e38 Exclude examples from deepsource (#1579)
  • fbca5cd Upgrade node and dependencies (#1578)
  • 2188744 Create codeql-analysis.yml (#1577)
  • 32861b5 Create .deepsource.toml (#1574)
  • 2a34d41 Add LGTM badge (#1571)
  • 69b7094 Workflows fixes (#1570)
  • 49c4131 Merge pull request #1531 from marnikvde/improve-docs
  • 3c8ff5c Merge branch 'master' into improve-docs
  • 685a72d Merge pull request #1277 from dcharbonnier/patch-1
  • 055f5c5 Merge branch 'master' into patch-1
  • c78b6d5 Merge pull request #1527 from heynikhil/patch-1
  • 53f1468 Merge branch 'master' into patch-1
  • 232f191 Merge pull request #1563 from lebseu/patch-1
  • e4cb073 Update README.md
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

πŸ›  Adjust project settings

πŸ“š Read more about Snyk's upgrade and patch logic

sonarcloud[bot] commented 3 years ago

Kudos, SonarCloud Quality Gate passed!

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

codecov[bot] commented 3 years ago

Codecov Report

Merging #28 (f3694d4) into master (bc19f64) will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master      #28   +/-   ##
=======================================
  Coverage   92.43%   92.43%           
=======================================
  Files          10       10           
  Lines         502      502           
  Branches       46       46           
=======================================
  Hits          464      464           
  Misses         31       31           
  Partials        7        7           

Continue to review full report at Codecov.

Legend - Click here to learn more Ξ” = absolute <relative> (impact), ΓΈ = not affected, ? = missing data Powered by Codecov. Last update bc19f64...f3694d4. Read the comment docs.