marvelai-org / marvel-platform

This is the marvel teaching assistant ai project.
https://app.marvelai.org/
MIT License
18 stars 98 forks source link

[Snyk] Upgrade express from 4.19.2 to 4.20.0 #167

Closed talhasabri closed 1 month ago

talhasabri commented 2 months ago

snyk-top-banner

Snyk has created this PR to upgrade express from 4.19.2 to 4.20.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860
696 No Known Exploit
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867
696 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
696 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
696 No Known Exploit
Release notes
Package name: express from express GitHub release notes

[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information: