Open snyk-bot opened 1 year ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Prototype Pollution
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-QS-3153490
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: restify
The new version differs by 21 commits.- 1a351e8 Add 'make cutarelease' for tagging and publishing a release.
- 15c9bf3 support passing most qs options to restify.queryParser (#1209)
- cfcfad0 note that this is the breaking change in 4.x (#1198)
- 6db6b6c update changes.md with 4.1.1 release info
- 4d2149b 4.1.1
- 841027c Update negotiator and lru-cache to address #1137 and #1139 (#1140)
- 4e459a3 changed error message in node6. fixes broken unit tests (#1108)
- 8ba70ab update changelog for 4.1.0
- 9b49269 4.1.0
- b220b54 update spdy to latest
- 22e3820 GH-959: fixes issue where cached routes were not setting maxVersion on the req (#1098)
- 0af5cca Merge pull request #1031 from restify/404-xss
- a015067 fix potential xss vector
- c100355 remove duplicate eslint rule causing build to fail
- 334afbb update changelog for 4.0.4
- c64489e 4.0.4
- 75f9a69 Merge pull request #940 from restify/GH-937
- 9a2721f GH-937: fix bug when missing content-type header results in response hanging
- 3468eb0 Merge pull request #918 from restify/missing-formatter-header
- 9472ad0 should fail to set content-type header when formatter is missing
- ac1b64f everything must be 80 columns like
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Prototype Pollution