search

only-cliches / Nano-SQL

Universal database layer for the client, server & mobile devices. It's like Lego for databases.
https://nanosql.io
MIT License
782 stars 49 forks source link

[Snyk] Security upgrade typedoc from 0.14.2 to 0.15.0 #240

Open only-cliches opened 11 months ago

only-cliches commented 11 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - website/package.json - website/package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **671/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 7 | Remote Code Execution (RCE)
[SNYK-JS-HANDLEBARS-1056767](https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767) | No | Proof of Concept ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **601/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.6 | Prototype Pollution
[SNYK-JS-HANDLEBARS-1279029](https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1279029) | No | Proof of Concept ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **579/1000**
**Why?** Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-HANDLEBARS-173692](https://snyk.io/vuln/SNYK-JS-HANDLEBARS-173692) | No | No Known Exploit ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **579/1000**
**Why?** Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-HANDLEBARS-174183](https://snyk.io/vuln/SNYK-JS-HANDLEBARS-174183) | No | No Known Exploit ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **579/1000**
**Why?** Has a fix available, CVSS 7.3 | Prototype Pollution
[SNYK-JS-HANDLEBARS-469063](https://snyk.io/vuln/SNYK-JS-HANDLEBARS-469063) | No | No Known Exploit ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **589/1000**
**Why?** Has a fix available, CVSS 7.5 | Denial of Service (DoS)
[SNYK-JS-HANDLEBARS-480388](https://snyk.io/vuln/SNYK-JS-HANDLEBARS-480388) | No | No Known Exploit ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **726/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 8.1 | Arbitrary Code Execution
[SNYK-JS-HANDLEBARS-534478](https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478) | No | Proof of Concept ![critical severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/c.png "critical severity") | **704/1000**
**Why?** Has a fix available, CVSS 9.8 | Prototype Pollution
[SNYK-JS-HANDLEBARS-534988](https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534988) | No | No Known Exploit ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **646/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 6.5 | Prototype Pollution
[SNYK-JS-HANDLEBARS-567742](https://snyk.io/vuln/SNYK-JS-HANDLEBARS-567742) | No | Proof of Concept ![low severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/l.png "low severity") | **506/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 3.7 | Prototype Pollution
[SNYK-JS-MINIMIST-2429795](https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795) | No | Proof of Concept ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **601/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.6 | Prototype Pollution
[SNYK-JS-MINIMIST-559764](https://snyk.io/vuln/SNYK-JS-MINIMIST-559764) | No | Proof of Concept ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **479/1000**
**Why?** Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-UGLIFYJS-1727251](https://snyk.io/vuln/SNYK-JS-UGLIFYJS-1727251) | No | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: typedoc The new version differs by 45 commits.
  • 73a13dd 0.15.0
  • 144e667 pin typescript to patch version
  • e0cdf64 update dependencies (#1041)
  • 92f0f25 Support negations in directory excludes
  • b328537 Updated lodash to 4.17.15 (to avoid prototype pollution)
  • e9b28ee Update marked to 0.7.0
  • 07afa11 fix: references marked as external if path has dots (#1052)
  • dfb7207 Revert "Merge branch 'master' into master"
  • 29df793 Merge branch 'master' into master
  • dc3c6f9 fix(package): update to typescript 3.5.x (#1047)
  • a2d3704 Merge pull request #1 from TypeStrong/master
  • ae67b72 run CI on current Node.js versions (#1053)
  • 9d54cc6 v0.15.0
  • 968da56 Fix tests
  • eb3cc11 Ran install
  • c65bcbc Switch packages
  • ac03c41 Rename for publish'
  • af7ad01 Create pull.yml
  • f781b20 Category fixes (#1008)
  • bb23e6d Move types (#1035)
  • d935c3e Add links to README.md headings (#981)
  • 682aaf2 Add support for excluding directories and refactor `expandInputFiles`. (#730)
  • 14d23b8 Allow TraverseCallback to bail out early (#1034)
  • 185ca2f Ran npm audit fix --force (#1019)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/only-cliches/project/8e21273a-473c-40f1-b485-123478b739f1?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/only-cliches/project/8e21273a-473c-40f1-b485-123478b739f1?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"a0e888bc-e54f-427d-b974-76161042ca1b","prPublicId":"a0e888bc-e54f-427d-b974-76161042ca1b","dependencies":[{"name":"typedoc","from":"0.14.2","to":"0.15.0"}],"packageManager":"npm","projectPublicId":"8e21273a-473c-40f1-b485-123478b739f1","projectUrl":"https://app.snyk.io/org/only-cliches/project/8e21273a-473c-40f1-b485-123478b739f1?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-HANDLEBARS-1056767","SNYK-JS-HANDLEBARS-1279029","SNYK-JS-HANDLEBARS-173692","SNYK-JS-HANDLEBARS-174183","SNYK-JS-HANDLEBARS-469063","SNYK-JS-HANDLEBARS-480388","SNYK-JS-HANDLEBARS-534478","SNYK-JS-HANDLEBARS-534988","SNYK-JS-HANDLEBARS-567742","SNYK-JS-MINIMIST-2429795","SNYK-JS-MINIMIST-559764","SNYK-JS-UGLIFYJS-1727251"],"upgrade":["SNYK-JS-HANDLEBARS-1056767","SNYK-JS-HANDLEBARS-1279029","SNYK-JS-HANDLEBARS-173692","SNYK-JS-HANDLEBARS-174183","SNYK-JS-HANDLEBARS-469063","SNYK-JS-HANDLEBARS-480388","SNYK-JS-HANDLEBARS-534478","SNYK-JS-HANDLEBARS-534988","SNYK-JS-HANDLEBARS-567742","SNYK-JS-MINIMIST-2429795","SNYK-JS-MINIMIST-559764","SNYK-JS-UGLIFYJS-1727251"],"isBreakingChange":false,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[671,601,579,579,579,589,726,704,646,506,601,479],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Remote Code Execution (RCE)](https://learn.snyk.io/lesson/malicious-code-injection/?loc=fix-pr) 🦉 [Prototype Pollution](https://learn.snyk.io/lesson/prototype-pollution/?loc=fix-pr) 🦉 [Denial of Service (DoS)](https://learn.snyk.io/lesson/redos/?loc=fix-pr)