search

hypersign-protocol / hyperfyre-frontend

A platform to automate the IDO whitelisting process using Hypersign SSI infrastructure.
https://fyre.hypersign.id
Apache License 2.0
3 stars 2 forks source link

[Snyk] Upgrade: cookie-parser, exceljs, express, express-validator, node-fetch, https-localhost, nodemailer, hypersign-auth-js-sdk, mongoose, url-parse, web3 #1979

Open Vishwas1 opened 2 months ago

Vishwas1 commented 2 months ago

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

cookie-parser
from 1.4.5 to 1.4.6 | 1 version ahead of your current version | 3 years ago
on 2021-11-16 exceljs
from 4.2.1 to 4.4.0 | 2 versions ahead of your current version | a year ago
on 2023-10-19 express
from 4.17.1 to 4.19.2 | 9 versions ahead of your current version | 5 months ago
on 2024-03-25 express-validator
from 6.12.0 to 6.15.0 | 8 versions ahead of your current version | 2 years ago
on 2023-02-16 node-fetch
from 2.6.1 to 2.7.0 | 13 versions ahead of your current version | a year ago
on 2023-08-23 https-localhost
from 4.6.5 to 4.7.1 | 2 versions ahead of your current version | 3 years ago
on 2022-02-16 nodemailer
from 6.6.2 to 6.9.14 | 28 versions ahead of your current version | 3 months ago
on 2024-06-19 hypersign-auth-js-sdk
from 2.0.4 to 2.0.8 | 4 versions ahead of your current version | 3 years ago
on 2021-10-10 mongoose
from 5.12.14 to 5.13.22 | 24 versions ahead of your current version | 8 months ago
on 2024-01-02 url-parse
from 1.5.1 to 1.5.10 | 9 versions ahead of your current version | 3 years ago
on 2022-02-22 web3
from 1.3.6 to 1.10.4 | 50 versions ahead of your current version | 7 months ago
on 2024-02-05

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Prototype Pollution
SNYK-JS-MONGOOSE-2961688		 586 Proof of Concept
high severity Prototype Pollution
SNYK-JS-MONGOOSE-5777721		 586 Proof of Concept
high severity Arbitrary File Write
SNYK-JS-TAR-1579147		 586 No Known Exploit
high severity Arbitrary File Write
SNYK-JS-TAR-1579152		 586 No Known Exploit
high severity Arbitrary File Write
SNYK-JS-TAR-1579155		 586 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970		 586 Proof of Concept
high severity Improper Input Validation
SNYK-JS-URLPARSE-2407770		 586 Proof of Concept
high severity Information Exposure
SNYK-JS-SIMPLEGET-2361683		 586 Proof of Concept
high severity Arbitrary File Overwrite
SNYK-JS-TAR-1536528		 586 No Known Exploit
high severity Arbitrary File Overwrite
SNYK-JS-TAR-1536531		 586 No Known Exploit
high severity Improper Verification of Cryptographic Signature
SNYK-JS-BROWSERIFYSIGN-6037026		 586 No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JS-JSZIP-1251497		 586 Proof of Concept
medium severity Arbitrary File Write via Archive Extraction (Zip Slip)
SNYK-JS-JSZIP-3188562		 586 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-MPATH-1577289		 586 Proof of Concept
medium severity Information Exposure
SNYK-JS-NODEFETCH-2342118		 586 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251		 586 No Known Exploit
medium severity Open Redirect
SNYK-JS-URLPARSE-1533425		 586 Proof of Concept
medium severity Access Restriction Bypass
SNYK-JS-URLPARSE-2401205		 586 Proof of Concept
medium severity Authorization Bypass
SNYK-JS-URLPARSE-2407759		 586 Proof of Concept
medium severity Open Redirect
SNYK-JS-GOT-2932019		 586 No Known Exploit
medium severity Open Redirect
SNYK-JS-GOT-2932019		 586 No Known Exploit
medium severity Information Exposure
SNYK-JS-MONGODB-5871303		 586 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-NODEMAILER-6219989		 586 Proof of Concept
medium severity Authorization Bypass Through User-Controlled Key
SNYK-JS-URLPARSE-2412697		 586 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090600		 586 Proof of Concept
medium severity Open Redirect
SNYK-JS-EXPRESS-6474509		 586 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-COOKIEJAR-3149984		 586 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758		 586 No Known Exploit
Release notes
Package name: cookie-parser from cookie-parser GitHub release notes
Package name: exceljs from exceljs GitHub release notes
Package name: express
  • © Githubissues.
  • Githubissues is a development platform for aggregating issues.