likecoin / puttyimages-web

Website for images adopted Like protocol.
https://dev.puttyimages.com/
GNU General Public License v3.0
18 stars 10 forks source link

[Snyk] Fix for 1 vulnerabilities #222

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Denial of Service (DoS)
SNYK-JS-SEQUELIZE-543029
Yes No Known Exploit
Commit messages
Package name: sequelize The new version differs by 250 commits.
  • 0a9b8a6 5.1.0
  • 6d84ced docs: fix styling issue with long comments
  • cf5aeea chore: v5 release (#10544)
  • 1275de0 docs: remove extra entries
  • d6d9d81 5.0.0-beta.17
  • bc6c133 docs: v5.0.0-beta.17
  • 4478d74 chore: strict linting for code and jsdocs (#10535)
  • f862e6b fix(util): improve performance of classToInvokable (#10534)
  • a26193a chore: enforce stricter linting (#10532)
  • 786b19b fix(build): default null for multiple primary keys
  • ae7d4b9 feat: expose Sequelize.BaseError
  • e03a537 fix(tests): missing clock instance
  • d7241f7 fix(tests): path for instance tests
  • 69b85c3 refactor: instance tests
  • 0c68590 feat(sqlite/query-generator): support restart identity for truncate-table (#10522)
  • 3cd3891 refactor(data-types): move to classes (#10495)
  • 1b4a7bf fix(association): use minimal select for hasAssociation (#10529)
  • 7ccbb1e fix(query-interface): reject with error for describeTable (#10528)
  • 454cf48 fix(model): throw for invalid include type (#10527)
  • 0b5aa71 fix(types): allow specifying additional options for db.query and add missing retry (#10512)
  • 45648dd docs(legacy): fix N:M example (#10509)
  • 10c34e3 fix(query): don't prepare options & sql for every retry (#10498)
  • e5c0d78 feat: upgrade to tedious@6.0.0 (#10494)
  • e0fe772 build: update dependencies
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic