gms1 / HomeOfThings

MIT License
5 stars 1 forks source link

[Snyk] Security upgrade @nestjs/platform-express from 10.4.4 to 10.4.5 #16

Closed gms1 closed 3 weeks ago

gms1 commented 4 weeks ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 601/1000
Why? Recently disclosed, Has a fix available, CVSS 6.3
Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @nestjs/platform-express The new version differs by 35 commits.
  • ed644e9 chore(@ nestjs) publish v10.4.5 release
  • 0ea48d2 Merge pull request #13879 from frndvrgs/feat-opts-listen-method
  • 508d2f3 Merge pull request #14060 from ezintz/fix-express-vulnerabilities
  • 7cf4708 Merge pull request #13903 from nestjs/dependabot/npm_and_yarn/sample/31-graphql-federation-code-first/posts-application/multi-dabac980bd
  • 8c2e03d Merge pull request #13917 from nestjs/dependabot/npm_and_yarn/sample/32-graphql-federation-schema-first/posts-application/micromatch-4.0.8
  • 6ada824 Merge pull request #14064 from PattyTrish/cookie-vulnerability-update
  • d2ca9ec Merge pull request #14066 from micalevisk/test/cover-validation-pipe-options
  • 78b3f0c test(common): add tests for validation pipe on 'custom' types
  • 980eb5b build(fastify): upgrade light-my-request to 6.1.0
  • 160c3b3 build(express): upgrade to express 4.2.1
  • d0f401a Merge pull request #14015 from nestjs/dependabot/npm_and_yarn/sample/10-fastify/find-my-way-8.2.2
  • 89840ce Merge pull request #14039 from nestjs/dependabot/npm_and_yarn/sample/23-graphql-code-first/multi-1f9ae28231
  • 9423743 Merge pull request #14040 from nestjs/dependabot/npm_and_yarn/sample/24-serve-static/multi-0b8bbc7c9e
  • 9ee0224 Update Readme.md
  • 93514fd chore(deps): bump send, @ nestjs/platform-express and express
  • a46a7db chore(deps): bump serve-static, express and @ nestjs/platform-express
  • 9825529 Merge pull request #14034 from nestjs/dependabot/npm_and_yarn/sample/28-sse/multi-5eb378ec3a
  • 826ff4b Merge pull request #14035 from nestjs/dependabot/npm_and_yarn/sample/28-sse/multi-6ddc2c7951
  • fd740b6 chore(deps): bump send and @ nestjs/platform-express in /sample/28-sse
  • c936dec chore(deps): bump serve-static and @ nestjs/platform-express
  • 47cda92 Merge pull request #14030 from nestjs/dependabot/npm_and_yarn/sample/25-dynamic-modules/multi-6ddc2c7951
  • d70d0ba Merge pull request #14031 from nestjs/dependabot/npm_and_yarn/sample/25-dynamic-modules/multi-5eb378ec3a
  • 0fbc2a6 chore(deps): bump serve-static and @ nestjs/platform-express
  • fa56e58 chore(deps): bump send and @ nestjs/platform-express
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

codecov[bot] commented 4 weeks ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 99.44%. Comparing base (1d7ba5c) to head (4bdb0c1). Report is 2 commits behind head on master.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #16 +/- ## ======================================= Coverage 99.44% 99.44% ======================================= Files 75 75 Lines 3633 3633 Branches 712 713 +1 ======================================= Hits 3613 3613 Misses 20 20 ``` | [Flag](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | Coverage Δ | | |---|---|---| | [asyncctx](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | `100.00% <ø> (ø)` | | | [jsonpointerx](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | `100.00% <ø> (ø)` | | | [nestjs-config](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | `100.00% <ø> (ø)` | | | [nestjs-logger](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | `100.00% <ø> (ø)` | | | [nestjs-sqlite3](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | `99.66% <ø> (ø)` | | | [nestjs-utils](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | `100.00% <ø> (ø)` | | | [node-sys](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | `99.37% <ø> (ø)` | | | [node-utils](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | `100.00% <ø> (ø)` | | | [sqlite3orm](https://app.codecov.io/gh/gms1/HomeOfThings/pull/16/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1) | `99.27% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=gms1#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.