emanchado / narrows

Online storytelling system
http://hardcorenarrativist.org/narrows/
BSD 3-Clause "New" or "Revised" License
113 stars 7 forks source link

[Snyk] Fix for 1 vulnerabilities #46

Open emanchado opened 10 months ago

emanchado commented 10 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **661/1000**
**Why?** Recently disclosed, Has a fix available, CVSS 7.5 | Missing Release of Resource after Effective Lifetime
[SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: fs-extra The new version differs by 47 commits.
  • 2da7def README: Node v0.12 deprecation notice.
  • f074627 1.0.0
  • 3b48231 CHANGELOG: add issues
  • d722ae9 Merge pull request #286 from agnivade/walkSync
  • 87dd3c8 Merge pull request #307 from jprichardson/coverage
  • 7448648 Fix coverage
  • 597a98f Merge pull request #305 from jprichardson/coveralls
  • 9d19da7 Merge pull request #306 from jprichardson/deps
  • ab3c29c Update devDeps, fix lint error
  • 662b78b Re-add Coveralls
  • 6f3caef Merge pull request #304 from jprichardson/path-is-absolute
  • bebbe78 Remove path-is-absolute
  • d71d9b3 Merge pull request #303 from jprichardson/docs-copySync
  • 916462b Document copySync filter inconsistency
  • 0314876 Merge pull request #300 from jprichardson/rimraf
  • a837927 Inline rimraf
  • 071f8ce Fix typo
  • f31b88e Merge pull request #301 from jprichardson/copySync-chmod
  • ac6f688 Remove chmod call from copySync
  • 23b2096 Merge pull request #299 from jprichardson/filter
  • 9da4958 Warn when filter is a RegExp
  • 7632804 Merge pull request #294 from jprichardson/ncp
  • abfe0be Merge pull request #293 from jprichardson/travis
  • 620992b Merge pull request #295 from jprichardson/filter-docs
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/emanchado/project/23b62348-d9b2-454a-8749-ec8c52ac9cec?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/emanchado/project/23b62348-d9b2-454a-8749-ec8c52ac9cec?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"96018649-2165-4d2e-932d-566dcbf0ea94","prPublicId":"96018649-2165-4d2e-932d-566dcbf0ea94","dependencies":[{"name":"fs-extra","from":"0.30.0","to":"1.0.0"},{"name":"sqlite3","from":"4.2.0","to":"5.0.3"}],"packageManager":"npm","projectPublicId":"23b62348-d9b2-454a-8749-ec8c52ac9cec","projectUrl":"https://app.snyk.io/org/emanchado/project/23b62348-d9b2-454a-8749-ec8c52ac9cec?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-INFLIGHT-6095116"],"upgrade":["SNYK-JS-INFLIGHT-6095116"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[661],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io/?loc=fix-pr)