Open snyk-bot opened 2 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.1
SNYK-JS-SHELLJS-2332187
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: shelljs
The new version differs by 71 commits.- 70668a4 0.8.5
- d919d22 fix(exec): lockdown file permissions (#1060)
- fcf1651 0.8.4
- a1111ee Silence potentially upcoming circular dependency warning (#973)
- d4d1317 0.8.3
- db317bf Add test case for sed on empty file (#904)
- 0d5ecb6 docs(changelog): updated by Nate Fischer [ci skip]
- 6b3c7b1 refactor: don't expose tempdir in common.state (#903)
- 4bd22e7 chore(ci): fix codecov on travis (#897)
- 2b3b781 fix: silent exec (#892)
- 37acb86 chore(npm): add ci-or-install script (#896)
- 4e861db chore(appveyor): run entire test matrix (#886)
- d079515 docs: remove gitter badge (#880)
- 4113a72 grep includes the i flag (#876)
- 8dae55f Fix(which): match only executable files (#874)
- 6d66a1a chore: rename some tests (#871)
- 131b88f Fix cp from readonly source (#870)
- 1dd437e fix(mocks): fix conflict between mocks and skip (#863)
- 72ff790 chore: bump dev dependencies and add package-lock (#864)
- 93bbf68 Prevent require-ing bin/shjs (#848)
- aa9d443 chore: output npm version in travis (#850)
- 4733a32 chore(appveyor): do not use latest npm (#847)
- dd5551d chore: update shelljs-release version (#846)
- 97a4df8 docs(changelog): updated by Nate Fischer [ci skip]
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic