Closed snyk-bot closed 2 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Recently disclosed, Has a fix available, CVSS 6.3
SNYK-JS-NODEFORGE-2331908
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.4
SNYK-JS-NODEFORGE-2331910
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: node-forge
The new version differs by 33 commits.- bc1a8d8 Release 1.0.0.
- 9055d6f Update changelog.
- 69395d0 Fix install note.
- 5f8d5c2 Update docs.
- 27286fe Fix style.
- a3f48e4 Fix spelling.
- aea85c5 Remove URL related APIs.
- db8016c Remove forge.util.parseUrl.
- e1a740d 🔒 change CSR examples to use 2048 bits
- 6a10f7c Fix OID `serialName` to `serialNumber`.
- c0bb359 Fix double call of String.fromCharCode.
- c90cd85 Use plain email.
- 219bbb2 Create SECURITY.md
- e01b2ee Fix typos.
- 6614511 Update changelog.
- 4d9a793 Fix spacing
- f981667 Add OIDs for surname, title and givenName
- 99676ae Update main checks workflow badge.
- dc9aa5e Rename main workflow.
- 423b2f3 Disable lint check.
- bff2123 Add 'test-node' script target.
- cbebc13 Fix workflow.
- 7aa796e Switch from travis to github actions.
- 5122808 Remove `forge.debug` API.
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic