tamirdahan / NodeJSWebApp

0 stars 0 forks source link

Update dependency express to ^4.19.0 - autoclosed #5

Closed mend-for-github-com[bot] closed 1 month ago

mend-for-github-com[bot] commented 1 month ago

This PR contains the following updates:

Package Type Update Change
express (source) dependencies minor ^4.18.2 -> ^4.19.0

By merging this PR, the issue #3 will be automatically resolved and closed:

Severity CVSS Score CVE
Medium Medium 6.1 CVE-2024-29041

Release Notes

expressjs/express (express) ### [`v4.19.0`](https://togithub.com/expressjs/express/blob/HEAD/History.md#4190--2024-03-20) [Compare Source](https://togithub.com/expressjs/express/compare/4.18.3...4.19.0) \========== - Prevent open redirect allow list bypass due to encodeurl - deps: cookie@0.6.0 ### [`v4.18.3`](https://togithub.com/expressjs/express/blob/HEAD/History.md#4183--2024-02-29) [Compare Source](https://togithub.com/expressjs/express/compare/4.18.2...4.18.3) \========== - Fix routing requests without method - deps: body-parser@1.20.2 - Fix strict json error message on Node.js 19+ - deps: content-type@~1.0.5 - deps: raw-body@2.5.2 - deps: cookie@0.6.0 - Add `partitioned` option