Open snyk-bot opened 1 year ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
SNYK-JS-VM2-5537079
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 9.8
SNYK-JS-VM2-5537100
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: vm2
The new version differs by 250 commits.- 2f446e5 Release 3.9.18
- 587bb13 Add tests for past vulnerabilities
- f5a129a Merge branch 'master' of https://github.com/patriksimek/vm2
- dd81ff6 Merge pull request #519 from XmiliaH/resolver-api
- af983a8 Merge remote-tracking branch 'upstream/master' into resolver-api
- 5206ba2 Inspect method should be readonly
- d88105f Ensure host array does not leak through proxy
- 4d662e3 Merge pull request #521 from ulixee/pathContext
- 1728bdf chore: simplify default function for path context
- 7d16a56 Merge branch 'patriksimek:master' into pathContext
- e085219 feat: default pathContext to sandbox
- cbd42bc fix: alter test to verify module context
- fb71483 fix: simplify api interface for pathContext
- 1b8b855 fix: pass pathContext to DefaultResolver
- 294ce23 feat: allow per-module choice for vm context
- 4f63dc2 Release 3.9.17
- f3db4de Handle host errors captured in Promises
- 4b22e87 Ensure every catch block is protected
- 7b4eeab Add tests
- e5cfcdc Reduce resolver API and add docu
- 9e2b605 Make resolver API public
- 24c724d Release 3.9.16
- 115d164 Release 3.9.15
- d534e57 Wrap host objects passes through prepareStackTrace
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.