search

docket-fyi / docket-api

Docket API
1 stars 0 forks source link

[Snyk] Fix for 1 vulnerabilities #230

Open john-goldsmith opened 9 months ago

john-goldsmith commented 9 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![low severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/l.png "low severity") | **506/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 3.7 | Regular Expression Denial of Service (ReDoS)
[npm:debug:20170905](https://snyk.io/vuln/npm:debug:20170905) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: debug The new version differs by 34 commits.
  • 0d3d66b 4.3.1
  • b6d12fd fix regression
  • 3f56313 4.3.0
  • e2d3bc9 add deprecation notice for debug.destroy()
  • 72e7f86 fix memory leak within debug instance
  • 27152ca add test for enable/disable of existing instances
  • 22e13fe fix quoted percent sign
  • 80ef62a 4.2.0
  • 09914af Marks supports-color as an *optional* peer dependency
  • db306db Update and pin ms to 2.1.2
  • 6b07f9e Fixes: Unable to take control over selectColor #747
  • 0c1d518 remove dead code and fix lowercase comment (for linter)
  • 4acdeed run linter inside of test script
  • 3f4d724 Add "engines" to `package.json` (#680)
  • 608fca9 Update ISSUE_TEMPLATE.md
  • 5c7c61d fix links in issue templates
  • 976f8d2 add issue and pull request templates
  • 982c12c test: only run coveralls on travis
  • 825d35a copy custom logger to namespace extension (fixes #646)
  • 5528572 use console.debug() in browser when available (closes #600)
  • c0127b1 remove examples folder (closes #650)
  • 94583b6 remove build system (closes #652)
  • 0e94034 update development dependencies
  • ad551e2 add Josh Junon to contributors
See the full diff
Package name: pm2 The new version differs by 115 commits.
  • 49f1871 pm2@4.5.0
  • 3e004dc add udp client/server example + fix typo
  • 310d68d pm2@4.5.0 - testing phase
  • 7f11906 Merge pull request #4681 from guard43ru/development
  • 108ddea Merge pull request #4741 from getsnoopy/fix-unit-test-script
  • c4929d1 Merge pull request #4762 from ffflorian/patch-1
  • b3b4c9a allow to pass --install to force yarn install on tarball install
  • 39286ab Merge pull request #4767 from ykolbin/fix_tarball_module_name_v2
  • 70715ae Merge pull request #4782 from mbrooks/master
  • 6ed7ae2 Merge pull request #4790 from sbleon/fix-e2e-test-path
  • 3e9b398 Merge pull request #4791 from sbleon/fix-namespace-cli-option
  • f578221 Merge pull request #4808 from typhonius/am-grammar-update
  • ff1e2f1 Merge pull request #4841 from web-native/development
  • b797970 Merge pull request #4846 from QS20199/fix/creating-log-folder-in-sync-mode-2
  • 918a41e upgrade dependencies
  • e3583a1 fix: remote tarball install
  • a83a3ba fix: creating-log-folder-in-sync-mode
  • 3ab9b67 fix: add test for creating-log-folder-in-sync-mode
  • 1cb0427 Update ProcessContainerFork.js
  • 14871cd pm2@4.4.1
  • 1ec91cc Small grammar fix and addition of units to output.
  • 74c03ac Use opts.namespace if it was passed in. Previously, it was ignored.
  • 15f777d Fix e2e test paths in CONTRIBUTING doc
  • 08ae19e Prevent reloadLogs command from hanging
See the full diff
Package name: socket.io The new version differs by 84 commits.
  • f8a66fd chore(release): 3.0.5
  • 752dfe3 chore: bump debug version
  • bf54327 revert: restore the socket middleware functionality
  • 170b739 fix: properly clear timeout on connection failure
  • 230cd19 chore: bump dependencies
  • a0a3481 test: fix random test failure
  • f773b48 chore: update GitHub issue templates
  • 292d62e docs(examples): update TypeScript example
  • 178e899 docs(examples): add Angular TodoMVC + Socket.IO example
  • d1bfe40 refactor: add more typing info and upgrade prettier (#3725)
  • 81c1f4e chore(release): 3.0.4
  • 1fba399 ci: migrate to GitHub Actions
  • 4e6d404 chore: make tests work on Windows (#3708)
  • 28c7cc0 style(issue-template): fix typo (#3700)
  • 06a2bd3 chore(release): 3.0.3
  • 85ebd35 chore: cleanup dist folder before compilation
  • 9b6f971 chore(release): 3.0.2
  • 43705d7 fix: merge Engine.IO options
  • 118cc68 chore: add 3rd party types in the list of dependencies
  • c596e54 docs(examples): update React Native example
  • f7e0009 docs(examples): update TypeScript example
  • e69d0ad chore: bump socket.io-client version
  • 0317a07 chore(release): 3.0.1
  • d00c0c0 docs(examples): update examples to Socket.IO v3
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/docket-ope/project/66e40190-a3fa-4369-a7b2-51a8f5a697cf?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/docket-ope/project/66e40190-a3fa-4369-a7b2-51a8f5a697cf?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"3e97a4cd-4044-41d6-91d6-b18e59c21ddb","prPublicId":"3e97a4cd-4044-41d6-91d6-b18e59c21ddb","dependencies":[{"name":"debug","from":"4.1.1","to":"4.3.1"},{"name":"pm2","from":"4.2.1","to":"4.5.0"},{"name":"socket.io","from":"2.3.0","to":"3.0.5"}],"packageManager":"npm","projectPublicId":"66e40190-a3fa-4369-a7b2-51a8f5a697cf","projectUrl":"https://app.snyk.io/org/docket-ope/project/66e40190-a3fa-4369-a7b2-51a8f5a697cf?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["npm:debug:20170905"],"upgrade":["npm:debug:20170905"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[506],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Regular Expression Denial of Service (ReDoS)](https://learn.snyk.io/lesson/redos/?loc=fix-pr)