search

coinolio / coinolio

Open source Bitcoin and Altcoin portfolio / trades logging and tracking. Including Profit / Loss calculations, Price Charts and realtime updates.
MIT License
28 stars 9 forks source link

[Snyk] Security upgrade knex from 0.14.6 to 0.16.4 #53

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 471/1000
Why? Recently disclosed, Has a fix available, CVSS 3.7		 Prototype Pollution
SNYK-JS-MINIMIST-2429795		 No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: knex The new version differs by 184 commits.
  • eb136f1 Merge branch 'master' of https://github.com/tgriesser/knex
  • 2072163 Update version in changelog (#3138)
  • f28ae7a Merge branch 'master' of https://github.com/tgriesser/knex
  • f757e36 Bump version to 0.16.4 (#3137)
  • 18532b2 Bump version to 0.16.4
  • 286d84b Prepare for 0.16.4-next3 release (#3136)
  • 1948c3d Add boolean as a column name in join (#3121)
  • fe6083e Support nullable timestamps on MySQL (#3100)
  • b15ee3d make unionAll()'s call signature match union() (#3055)
  • e7ed005 Fix queryContext not being passed to raw queries (#3111)
  • 11fdc0c Add missing clearOrder & clearCounters types (#3109)
  • 7ecbcd5 Update changelog and version number (#3108)
  • 5fea86e Update dependencies (#3107)
  • 19926d8 [#3033] fix: sqlite3 drop/renameColumn() breaks with postProcessResponse (#3040)
  • 24fcf27 Fix transaction support for migrations (#3084)
  • de1c934 Include 'string' as accepted Knex constructor type definition (#3105)
  • 0aacab5 Fix for #2998 - Migrator & TypeScript (#3041)
  • fcd21d9 Add command for executing tests on SQLite (#3101)
  • 1da56a3 Update mssql dev dep to v5 stable (#3096)
  • b9a648c Format code (#3088)
  • 0db7859 add test that clearing offset (#2954)
  • f3f0750 Make TS stubs modern (#3080)
  • 68723e0 Update changelog (#3086)
  • 1b39d67 Tests for drop-and-recreate with async/await (#3083)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution