🐳 Simple example of event driven communication between microservices, based on Docker containers, Docker Compose and RabbitMQ. Microservices are implemented in Node.js using Koa.
MIT License
248
stars
84
forks
source link
[Snyk] Security upgrade mongoose from 5.9.26 to 5.13.20 #53
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
#### Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- services/authentication/package.json
- services/authentication/package-lock.json
#### Vulnerabilities that will be fixed
##### With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity
:-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------
![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **798/1000** **Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.1 | Prototype Pollution [SNYK-JS-MONGOOSE-5777721](https://snyk.io/vuln/SNYK-JS-MONGOOSE-5777721) | No | Proof of Concept
(*) Note that the real score may have changed since the PR was raised.
Commit messagesPackage name: mongoose
The new version differs by 250 commits.
77b9d99 Updated the isIndexEqual function to take into account non-text indexes when checking compound indexes that include both text and non-text indexes
9dd82be Merge pull request #13132 from rdeavila94/gh-12654
d0e149b Merge pull request #12737 from Automattic/vkarpov15/gh-12654
cdab11e chore: remove Node 5 and 7 from CI because GitHub actions is bugging out with them
e33a8be fix(types): add missing typedefs for bulkSave() to 5.x
896cd76 Merge pull request #12692 from hasezoey/backportLinkUpdate
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
------------
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/rithinch/project/d6229fd1-2b3a-4ead-bc15-65dbf8f73da0?utm_source=github&utm_medium=referral&page=fix-pr)
🛠 [Adjust project settings](https://app.snyk.io/org/rithinch/project/d6229fd1-2b3a-4ead-bc15-65dbf8f73da0?utm_source=github&utm_medium=referral&page=fix-pr/settings)
📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities)
[//]: # (snyk:metadata:{"prId":"1994ded4-8923-46db-8681-9889575edd13","prPublicId":"1994ded4-8923-46db-8681-9889575edd13","dependencies":[{"name":"mongoose","from":"5.9.26","to":"5.13.20"}],"packageManager":"npm","projectPublicId":"d6229fd1-2b3a-4ead-bc15-65dbf8f73da0","projectUrl":"https://app.snyk.io/org/rithinch/project/d6229fd1-2b3a-4ead-bc15-65dbf8f73da0?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-MONGOOSE-5777721"],"upgrade":["SNYK-JS-MONGOOSE-5777721"],"isBreakingChange":false,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[798],"remediationStrategy":"vuln"})
---
**Learn how to fix vulnerabilities with free interactive lessons:**
🦉 [Prototype Pollution](https://learn.snyk.io/lesson/prototype-pollution/?loc=fix-pr)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - services/authentication/package.json - services/authentication/package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **798/1000****Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.1 | Prototype Pollution
[SNYK-JS-MONGOOSE-5777721](https://snyk.io/vuln/SNYK-JS-MONGOOSE-5777721) | No | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: mongoose
The new version differs by 250 commits.