shehackspurple / Pixi

The Pixi module is a MEAN Stack web app with wildly insecure APIs!
Apache License 2.0
0 stars 2 forks source link

[Snyk] Security upgrade swagger-jsdoc from 1.10.3 to 3.3.0 #6

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 479/1000
Why? Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599
Yes No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090600
Yes No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601
Yes No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: swagger-jsdoc The new version differs by 43 commits.
  • ce9ad85 Release 3.3.0
  • f265196 chore(deps): upgrade all dependencies (#166)
  • 78afae5 Update swagger-parser to fix remote execution bug (#165)
  • b472303 Update outdated dev dependencies (#164)
  • 1db7d5e fix: JSDoc Official website link (#162)
  • ece24be Release 3.2.9
  • 7041d59 Updating js-yaml dependency to 3.13.1 to fix remote execution vulnerability (#157)
  • 098078b Release 3.2.8
  • f159612 Bump js-yaml version to fix https://www.npmjs.com/advisories/788 (#156)
  • a040963 fix: CLI usage example (#154)
  • 9769dfd Release 3.2.7
  • 08d0cbc Removes apis from input Def before generation. (#151)
  • 3563890 Release 3.2.6
  • 2a9fae8 Adding specification configuration documentation to GETTING-STARTED.md (#147)
  • d0555ae Release 3.2.5
  • 2ac328d fix: remove es2017 specific language feature (#145)
  • 714d42b Release 3.2.4
  • 95727cc Return false for non-empty objects (#143)
  • e93291f Update CLI usage example (#140)
  • 261009f Quick spelling change (#135)
  • 36984bf Correction
  • 2d2a6c7 Release 3.2.2
  • e2e12fa Simplify
  • 36e2a48 Add documentation section
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

sonarcloud[bot] commented 2 years ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication