likecoin / puttyimages-web

Website for images adopted Like protocol.
https://dev.puttyimages.com/
GNU General Public License v3.0
18 stars 10 forks source link

[Snyk] Fix for 1 vulnerabilities #229

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-YARGSPARSER-560381
Yes Proof of Concept
Commit messages
Package name: sequelize-cli The new version differs by 46 commits.
  • c46f744 5.5.0
  • 3d1c41e docs: changelog for next release
  • a04ff93 chores: remove extra build from ci
  • cd57b40 fix: special characters in password are not escaped (#722)
  • 0828c1f chore(package): update mocha to version 6.0.0 (#745)
  • c15c81f change: default config for operator aliases (#743)
  • 8dc5a20 fix(package): update yargs to version 13.1.0 (#744)
  • 77a9a76 chore(package): update gulp to version 4.0.0 (#726)
  • c19149f docs: enum type (#728)
  • 139f854 5.4.0
  • a3acaef docs: changelog for v5.4.0
  • 002b564 chores: update dependencies
  • 55a8673 fix: show commands with --help (#719)
  • 9119c79 chore(package): update through2 to version 3.0.0 (#714)
  • fc9bf90 5.3.0
  • d65df7d docs: changelog for v5.3.0
  • ff4e5c3 fix(db:create): syntax errors on mssql create statement (#711)
  • 1a0f15a style: grammar mistake in seeder skeleton (#705)
  • ee4e9db feat(mode:generate) add enum support (#704)
  • 1057191 5.2.0
  • 15dbf8e changelog for v5.2.0
  • aedca52 feat(db:create): support options on db:create with sequelize@4 (#700)
  • e19de05 5.1.0
  • 41aeff6 changelog for v5.1.0
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic