Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade xmldom from 0.4.0 to 0.6.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **2 versions** ahead of your current version.
- The recommended version was released **2 years ago**, on 2021-04-17.
The recommended version fixes:
Severity | Issue | PriorityScore (*) | Exploit Maturity |
:-------------------------:|:-------------------------|-------------------------|:-------------------------
| XML External Entity (XXE) Injection [SNYK-JS-XMLDOM-1084960](https://snyk.io/vuln/SNYK-JS-XMLDOM-1084960) | **484/1000** **Why?** Has a fix available, CVSS 5.4 | No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Release notes Package name: xmldom
dbd2171 Export DOMException; remove custom assertions; etc. (#174)
Compare
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/snyk-hunter/project/aa9eaf48-e582-4652-b7a0-94cdad3ea905?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/snyk-hunter/project/aa9eaf48-e582-4652-b7a0-94cdad3ea905/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/snyk-hunter/project/aa9eaf48-e582-4652-b7a0-94cdad3ea905/settings/integration?pkg=xmldom&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade xmldom from 0.4.0 to 0.6.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **2 versions** ahead of your current version. - The recommended version was released **2 years ago**, on 2021-04-17. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:-------------------------
[SNYK-JS-XMLDOM-1084960](https://snyk.io/vuln/SNYK-JS-XMLDOM-1084960) | **484/1000**
**Why?** Has a fix available, CVSS 5.4 | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: xmldom
-
0.6.0 - 2021-04-17
-
0.5.0 - 2021-03-09
-
0.4.0 - 2020-10-27
from xmldom GitHub release notesCommit messages
Package name: xmldom
- c80a161 xmldon version 0.6.0
- bc36efd chore: regenerate package-lock.json
- 8a92704 Update eslint -> ^7.23.0 - devDependencies (#202)
- b12106e Update @ stryker-mutator/core -> ^4.5.1 - devDependencies (#192)
- af4642e docs: Update Changelog (#197)
- 5869d76 test(stryker): Replace line numbers by error index (#201)
- a681852 fix: Escape `<` when serializing attribute values (#199)
- bb12247 Update eslint-config-prettier -> 8 - devDependencies (#187)
- 48c51b3 Update eslint -> ^7.22.0 - devDependencies (#185)
- 82b0481 refactor!: Avoid empty namespace value like xmlns:ds="" (#168)
- fa67fcf chore: set version to 0.5.1-dev in package*.json
- f763b00 xmldom version 0.5.0
- d4201b9 Merge pull request from GHSA-h6q6-9hqw-rwfv
- a4d717c Update MDN links in readme.md (#188)
- e984b3f Update @ stryker-mutator/core -> ^4.4.1 - devDependencies (#184)
- c762161 Update stryker monorepo (major) (#140)
- fd47c51 Fix breaking preprocessors' directives when parsing attributes (#171)
- baa67f5 Update xmltest -> ^1.5.0 - devDependencies (#182)
- 64c7388 fix(dom): Escape `]]>` when serializing CharData (#181)
- b73a965 Update eslint-config-prettier -> ^7.2.0 - devDependencies (#179)
- 21bc17e Switch to (only) MIT license (#178)
- ad773c9 test: Use toBe/toStrictEqual instead of toEqual (#175)
- 23608d9 chore: Add karfau as contributor (#177)
- dbd2171 Export DOMException; remove custom assertions; etc. (#174)
Compare**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: