search

apavlidi / IT_API

The Internet services of the IT department of Alexander Technological Education Institute of Thessaloniki
http://api.it.teithe.gr/
MIT License
14 stars 5 forks source link

[Snyk] Security upgrade jszip from 3.1.5 to 3.7.0 #124

Closed snyk-bot closed 2 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3		 Denial of Service (DoS)
SNYK-JS-JSZIP-1251497		 No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: jszip The new version differs by 81 commits.
  • e5b3f0d 3.7.0
  • e88ba4b Update for version 3.7.0
  • 9046487 Disable proto assert that fails in browsers
  • 6d029b4 Merge pull request #766 from MichaelAquilina/fix/files-null-prototype
  • bb38812 Ensure prototype isn't modified by zip file
  • d024c22 test: Add test case for loading zip filenames which shadow method names
  • 2235749 fix: Use a null prototype object for this.files
  • b7f472d Merge pull request #757: Update license to be valid spdx identifier
  • a311039 update license to be valid spdx identifier
  • 112fcdb 3.6.0
  • 7c75dff Update changelog and build for 3.6.0
  • 10035ad Update contributing
  • dcc6ff9 Merge pull request #742 from jahed/fix/webpack-5-async-failure
  • f4700f9 fix(browser): redirect main to dist on browsers
  • 3db5fdc Merge pull request #734 from JayFate/master
  • e534454 fix: duplicate require
  • 25d401e Merge pull request #703 from vdoubleu/patch-1
  • 9f13168 fix small error in read_zip.md
  • 7bbcb38 3.5.0
  • ff65ad3 Changelog and version changes for 3.5.0
  • 9591294 Merge pull request #666 from ffflorian/fix/types/output-string
  • 2aad916 Merge pull request #669 from jjhbw/master
  • 9d56abc Merge pull request #682 from lubeskih/681-update-nodestream-type
  • ed8a758 Merge pull request #544 from mljsgto222/invalid_extra_field_data
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic