search

piratasinsanos / clashroyale-api

Clash Royale API.
MIT License
0 stars 0 forks source link

[Snyk] Security upgrade npm from 5.10.0 to 6.2.0 #90

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: npm The new version differs by 229 commits.
  • ab3c62a 6.2.0
  • 0cfe801 update AUTHORS
  • 890c132 doc: update changelog for npm@6.2.0
  • 7a08a9b empty
  • 322d9c2 chore: Make standard happy
  • 4231a0a meta: Add cli-table3 to bundledeps
  • f0a372b docs: replace references to the old repo or issue tracker (#5)
  • 4c32413 run-script: Do not use SET to fetch the env in git-bash or cygwin
  • 7984206 version: Add new sign-git-commit config (#12697)
  • 244b183 audit: add support for --parseable output (#20554)
  • 7381783 docs: republish waiting period (#20920)
  • 5724983 docs: remove back-ticks not being parsed as markdown (#21165)
  • 90c759f npm-audit-report@1.3.1
  • 8dc6d76 cli-table3@0.5.0
  • 2ac48f8 node-gyp@3.7.0
  • d9b2712 request@2.81.0
  • 843bdd6 6.2.0-next.1
  • 5440b5e doc: update changelog for npm@6.2.0
  • ecdcbd7 misc: remove postinstall script that broke stuff (#21129)
  • ea9415f 6.2.0-next.0
  • d7cf1b3 update AUTHORS
  • feb4e2b doc: update changelog for npm@6.2.0
  • fe4240e uuid@3.3.2
  • 177cbb4 cache: Add warning text about using temp cache for debugging (#21105)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic