search

meanjs / mean

MEAN.JS - Full-Stack JavaScript Using MongoDB, Express, AngularJS, and Node.js -
http://meanjs.org
MIT License
4.87k stars 1.98k forks source link

[Snyk] Fix for 5 vulnerabilities #2071

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599		 Yes No Known Exploit
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090600		 Yes No Known Exploit
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601		 Yes No Known Exploit
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602		 Yes No Known Exploit
high severity 758/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3		 Access Restriction Bypass
SNYK-JS-XMLHTTPREQUESTSSL-1255647		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: socket.io The new version differs by 57 commits.
  • 1af3267 chore(release): 3.0.0
  • 02951c4 chore(release): 3.0.0-rc4
  • 54bf4a4 feat: emit an Error object upon middleware error
  • aa7574f feat: serve msgpack bundle
  • 64056d6 docs(examples): update TypeScript example
  • cacad70 chore(release): 3.0.0-rc3
  • d16c035 refactor: rename ERROR to CONNECT_ERROR
  • 5c73733 feat: add support for catch-all listeners
  • 129c641 feat: make Socket#join() and Socket#leave() synchronous
  • 0d74f29 refactor(typings): export Socket class
  • 7603da7 feat: remove prod dependency to socket.io-client
  • a81b9f3 docs(examples): add example with TypeScript
  • 20ea6bd docs(examples): add example with ES modules
  • 0ce5b4c chore(release): 3.0.0-rc2
  • 8a5db7f refactor: remove duplicate _sockets map
  • 2a05042 refactor: add additional typings
  • 91cd255 fix: close clients with no namespace
  • 58b66f8 refactor: hide internal methods and properties
  • 669592d feat: move binary detection back to the parser
  • 2d2a31e chore: publish the wrapper.mjs file
  • ebb0575 chore(release): 3.0.0-rc1
  • c0d171f test: use the reconnect event of the Manager
  • 9c7a48d test: use the complete export name
  • 4bd5b23 feat: throw upon reserved event names
See the full diff
Package name: validator The new version differs by 250 commits.
  • 24b3fd3 13.6.1
  • b986f3d fix: ReDOS in isEmail and isHSL (#1651)
  • 2a3a1c3 13.6.0
  • 1fa0959 chore: add typeof utility (#1648)
  • cf403d0 fix(isMobilePhone): add Sierra Leone phone and fix Sri Lanka phone (#1558)
  • 3f70b8e feat(isPassportNumber, isIBAN, isMobilePhone): add Mozambique locale (#1604)
  • 05ceb18 isURL(): Allow URLs to have only a username in the userinfo subcomponent (#1644)
  • 9ee1b6b fix(isMobilePhone): update china zh-CN locale (#1642)
  • b82f4f2 fix(docs): typo in README.md (#1640)
  • 615547f feat(isMobilePhone): add Latvia lv-LV locale (#1638)
  • d006e08 fix(isMobilePhone): add support for new networks codes in GH (#1635)
  • c33fca6 fix(isISIN): optimization (#1633)
  • 2ef84e4 fix(isIP): validator patterns for IPv4 and IPv6 RegExp formats (#1632)
  • 67a200d feat(isPostalCode): add KR locale (#1628)
  • b65ddc5 fix: fix A-z ranges (#1625)
  • 39830a9 feat: IR passport and identityCard, respect .gitignore files (#1595)
  • 5d6db63 feat(isIPRange): add support for IP version 4 or 6 (#1594)
  • a31c116 fix: update isMobilePhone validation for en-SG (#1573)
  • 63b6162 chore: add gitter chatroom badge (#1592)
  • bb0dba6 feat(isPassportNumber): add MY locale (#1574)
  • 7989e5b feat(isLicensePlate): add support for pt-BR locale (#1588)
  • 3c771e8 feat(pt-BR): tax id, passport and license plates (#1613)
  • 418df05 fix(isMobilePhone): prevent allowing landline numbers in es-CO (#1623)
  • 6262f62 chore: improving code coverage to 100% branches (#1624)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic