redwerks / mediawiki-extensionservice

A service and API that gathers and exposes metadata about MediaWiki extensions.
https://tools.wmflabs.org/extensionservice/
MIT License
1 stars 1 forks source link

[Snyk] Fix for 1 vulnerabilities #24

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 758/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3
Prototype Pollution
SNYK-JS-LODASH-608086
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: express-promise-router The new version differs by 27 commits.
  • 2f765c6 1.1.1
  • 1a9b08b Merge pull request #24 from mormahr/master
  • 10f4bd1 Fix tabs / spaces
  • 3cc4816 1.1.0
  • 7a85b9f Merge pull request #23 from TheThing/master
  • e9c142c Update jshint-stylish
  • 292edd3 Update load-grunt-tasks
  • 61f2c83 Fix coding style
  • 891c757 Update grunt and grunt plugins
  • 97280fc Update chai
  • a34d9c6 Redo removing the .done() call even if it is discouraged to retain behaviour
  • bd02fb8 Updated lodash to 4.x (4.13.x)
  • 80698c3 Updated bluebird to 3.x (3.4.x)
  • 578751a Merge remote-tracking branch 'alex-whitney/master'
  • 1bbc3ff router: Clean, optimise and comment
  • 05006c5 router: Remove redundant unused code
  • 0cd580b Merge pull request #22 from TheThing/master
  • ce5fea4 router: Add support for array of routes
  • 79be673 throw pretty error if handler is not a function
  • e690739 router: Fix unresolved promises in use.params
  • 989e835 package: Add grunt-cli to dev dependancy
  • 7bb5e7d 1.0.0
  • 3cb7975 fix tests
  • 0ac257c Merge pull request #20 from cypherix93/#18
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

πŸ›  Adjust project settings

πŸ“š Read more about Snyk's upgrade and patch logic