flaviuse / mern-authentication

MERN stack authentication boilerplate: password reset, email verification, server sessions, redux, typescript, hooks and docker for dev and prod.
https://mern-auth-client.herokuapp.com/login
MIT License
439 stars 95 forks source link

[Snyk] Upgrade nodemon from 2.0.9 to 2.0.12 #86

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade nodemon from 2.0.9 to 2.0.12.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-1579269
554/1000
Why? Proof of Concept exploit, Recently disclosed, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: nodemon
  • 2.0.12 - 2021-07-10

    2.0.12 (2021-07-10)

    Bug Fixes

    • windows: properly handle quoted args in event (0823f18), closes #1823
  • 2.0.12-alpha.3 - 2021-07-10
  • 2.0.12-alpha.2 - 2021-07-10
  • 2.0.12-alpha.1 - 2021-07-10
  • 2.0.11 - 2021-07-09

    2.0.11 (2021-07-09)

    Bug Fixes

    • ensure numerical OS version check (f523d0e)
  • 2.0.11-alpha.1 - 2021-07-09
  • 2.0.10 - 2021-07-08

    2.0.10 (2021-07-08)

    Bug Fixes

    • windows 8 doesn't support windows-kill (6c6cb65), closes #1876
  • 2.0.10-alpha.2 - 2021-07-07
  • 2.0.10-alpha.1 - 2021-07-02
  • 2.0.9 - 2021-06-30

    2.0.9 (2021-06-30)

    Bug Fixes

from nodemon GitHub release notes
Commit messages
Package name: nodemon
  • 0823f18 fix(windows): properly handle quoted args in event
  • b52fc89 Merge branch 'master' of github.com:remy/nodemon
  • f523d0e fix: ensure numerical OS version check
  • 46791d6 chore: update issue template
  • 79ad546 chore: fix stale.yml
  • 08f6599 chore: move workflow to dir
  • f3903a4 chore: update stalebot
  • 6c6cb65 fix: windows 8 doesn't support windows-kill
  • 5bb92d4 Merge branch 'master' of github.com:remy/nodemon
  • f4b89f5 chore: new supporters
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs