SwitchbladeBot / switchblade

The open source Discord bot that solves all of your problems.
https://switchblade.xyz/
BSD 4-Clause "Original" or "Old" License
424 stars 224 forks source link

[Snyk] Security upgrade rss-parser from 3.12.0 to 3.13.0 #1405

Closed snyk-bot closed 11 months ago

snyk-bot commented 1 year ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 758/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3
Prototype Pollution
SNYK-JS-XML2JS-5414874
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: rss-parser The new version differs by 26 commits.
  • 74bdfd2 3.13.0
  • 0413e12 Build distribution
  • 2de2c40 Merge pull request #247 from Arisamiga/master
  • 3265b41 lockfileVersion 3 ->2 for backwards compatibility
  • 986f163 Merge branch 'master' into master
  • 861855f Merge pull request #248 from rbren/rb/update-actions
  • 49b7a41 Update node.js.yml
  • 8e962eb Fix for dependency collision
  • 46667c1 Updated Dependencies
  • 4c1a0dc Merge pull request #242 from d-line/master
  • f76cc42 Merge pull request #2 from d-line/node-bump
  • e51b7be fix: use 3 most recent LTS releases in worklow
  • 54ac781 Merge pull request #1 from d-line/tests-fix
  • 12f3cd2 fix: carefully handle when 'rdf:about' is not there. regenerate test mocks
  • e2e2f4d Merge pull request #203 from yuiseki/rdf-about
  • b8cff02 Merge pull request #209 from drublic/master
  • 697af31 Merge pull request #200 from KevinFerm/patch-1
  • 18dd399 Add field in item: episodeType on itunes data
  • ef4f4a2 fix typo
  • 67c3dbb add `rdf:about` field to item on `parseItemRss`
  • 2e0244a Update index.d.ts
  • 33a9a42 Merge pull request #195 from Booligoosh/patch-1
  • f50421d Merge pull request #196 from drublic/master
  • af6a5ad Fix breakting keywords and categories if there are attributes `text`
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution