search

alexlyee / massdm

MassDM v3, a bot to send mass DMs to members of your Discord server.
Apache License 2.0
42 stars 138 forks source link

[Snyk] Security upgrade discord.js from 11.6.4 to 13.14.0 #45

Open alexlyee opened 8 months ago

alexlyee commented 8 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-WS-1296835](https://snyk.io/vuln/SNYK-JS-WS-1296835) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: discord.js The new version differs by 250 commits.
  • 81b358c chore(discord.js): release discord.js@13.14.0
  • af6a0e5 fix(ThreadChannel): fetch starter message properly (#9217)
  • e15b70f Fix a rare error regarding interactions (#9218)
  • df68520 fix(Actions): inject built data by using a symbol (#9204)
  • 4bc25c4 feat: add support for gif stickers (v13) (#9158)
  • 120270e feat: v13 support `SUPPRESS_NOTIFICATIONS` flag (#9184)
  • 9f7d1f3 chore(discord.js): release discord.js@13.13.1 (#9156)
  • 224f21c fix(Constants): enum creation error (#9155)
  • 7f1735d chore(discord.js): release discord.js@13.13.0 (#9154)
  • fd494a3 feat(GuildMemberManager): add `addRole` and `removeRole` methods (#9108)
  • b586df8 ci: create publish release workflow v13 (#9151)
  • 0188e36 feat(WebSocketShard): v13 add resume url (#9078)
  • 84d34dc feat: v13 `guildAuditLogEntryCreate` event (#9092)
  • 7737bbe ci: add pull request triage and Kodiak merge workflow (#9109)
  • 61fa6f4 feat(Constants): add auto moderation events to WSEvents (#9102)
  • 0afa405 feat: role subscriptions (#9040)
  • eed293f fix: minor forums cleanup (#9033)
  • 86329ad feat(GuildChannelManager): add `addFollower` (#9050)
  • 69d71e9 feat(Guild): add `INVITES_DISABLED` feature support (#9051)
  • a7dc40f feat(ClientApplication): add role connections (#9072)
  • 32cdaff feat(Webhook): add `channel` getter (#9074)
  • 123d0f1 fix(InteractionResponses): spell `messages` correctly (#9080)
  • d69529e feat(GuildMember): add `flags` (#9098)
  • c2968b5 feat: `applicationCommandPermissionsUpdate` event (#9121)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/alexlyee/project/b8631e7d-243f-41f0-859b-27d58debef7c?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/alexlyee/project/b8631e7d-243f-41f0-859b-27d58debef7c?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"1404c1f6-62a0-4ebc-9996-000facd1268c","prPublicId":"1404c1f6-62a0-4ebc-9996-000facd1268c","dependencies":[{"name":"discord.js","from":"11.6.4","to":"13.14.0"}],"packageManager":"npm","projectPublicId":"b8631e7d-243f-41f0-859b-27d58debef7c","projectUrl":"https://app.snyk.io/org/alexlyee/project/b8631e7d-243f-41f0-859b-27d58debef7c?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-WS-1296835"],"upgrade":["SNYK-JS-WS-1296835"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[586],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Regular Expression Denial of Service (ReDoS)](https://learn.snyk.io/lesson/redos/?loc=fix-pr)