search

postmanlabs / swagger2-postman2

Module and library to convert Swagger 2.0 to a Postman Collection (v2.0)
Apache License 2.0
82 stars 42 forks source link

[Snyk] Security upgrade swagger2openapi from 5.3.0 to 7.0.0 #69

Closed snyk-bot closed 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 405/1000
Why? CVSS 8.1		 Prototype Pollution
SNYK-JS-AJV-584908		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: swagger2openapi The new version differs by 174 commits.
  • d4c6b90 Publish
  • ee3eda7 docs: comments only
  • 861a950 build: update eslint to 7.8.1
  • d68d6c9 Merge pull request #277 from Mermade/dependabot/npm_and_yarn/lodash-4.17.20
  • 11992a0 build(deps): bump lodash from 4.17.14 to 4.17.20
  • c111e65 Merge pull request #276 from Mermade/dependabot/npm_and_yarn/mocha-8.1.3
  • db4bff7 Merge pull request #278 from Mermade/dependabot/npm_and_yarn/eslint-7.8.0
  • 04a26bd build: revert CI test --anchors opt
  • 40fe71e build: fix CI test failures
  • 9b567b7 build(deps-dev): bump mocha from 8.1.1 to 8.1.3
  • 0c73845 build(deps-dev): bump eslint from 7.6.0 to 7.8.0
  • 5eb942b build: remove unneeded devDeps
  • a64db05 fix: remove CLIError usage
  • d8ffda1 feat: remove ajv
  • 1c6b900 docs: fix boast link in s2o README.md
  • d34a97c fix: validator ref perf improvements
  • 1dd43cf fix: val. use options.source not origin for url base
  • 7b50c86 fix: validation for templated urls
  • 669e066 boast: set laxDefaults true
  • e1cea0b fix: validator improve server-url/variable msg
  • 63c5eba Publish
  • 5d53356 docs: update linter rule docs
  • dbfaf21 fix: validator regression in schema $ref failure message
  • 96aea91 fix: remove unused vulnerable URLRegex, make whatwg true by default
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

VShingala commented 4 years ago

PR with the Latest swagger2openapi version already merged.