search

tonesto7 / echo-speaks-server

45 stars 926 forks source link

[Snyk] Upgrade winston from 3.8.2 to 3.10.0 #94

Open tonesto7 opened 1 year ago

tonesto7 commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade winston from 3.8.2 to 3.10.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **2 versions** ahead of your current version. - The recommended version was released **22 days ago**, on 2023-07-10. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- | Prototype Pollution
[SNYK-JS-ASYNC-2441827](https://snyk.io/vuln/SNYK-JS-ASYNC-2441827) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | Proof of Concept | Prototype Pollution
[SNYK-JS-JSONSCHEMA-1920922](https://snyk.io/vuln/SNYK-JS-JSONSCHEMA-1920922) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | No Known Exploit | Directory Traversal
[SNYK-JS-MOMENT-2440688](https://snyk.io/vuln/SNYK-JS-MOMENT-2440688) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | No Known Exploit | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-MOMENT-2944238](https://snyk.io/vuln/SNYK-JS-MOMENT-2944238) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | Proof of Concept | Prototype Poisoning
[SNYK-JS-QS-3153490](https://snyk.io/vuln/SNYK-JS-QS-3153490) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | Proof of Concept | Information Exposure
[SNYK-JS-FOLLOWREDIRECTS-2332181](https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-2332181) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | Proof of Concept | Information Exposure
[SNYK-JS-FOLLOWREDIRECTS-2396346](https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-2396346) | **482/1000**
**Why?** Proof of Concept exploit, CVSS 7.5 | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: winston from winston GitHub release notes
Commit messages
Package name: winston
  • 19ac9d8 3.10.0
  • fc9c83d Avoid potential github issues - relax engines node requirement in package.json
  • eda40ef Export Logger class (#2181)
  • f7e7f2f Added Lazy option to file transport (#2317)
  • de2e887 Bump eslint from 8.32.0 to 8.44.0 (#2321)
  • fcc69ec docs(#2319): Syntax error on README.md (#2320)
  • 9d6001a fix(types): Allow any object to be passed as meta to logger.profile (#2314)
  • 06e3165 Bump @ types/node from 18.11.18 to 20.3.1 (#2313)
  • 61e2f5b Update supported Node versions and run npm audit fix (#2315)
  • 7643ad6 Bump @ babel/core from 7.20.12 to 7.22.1 (#2309)
  • 0ed7650 Merge branch 'master' of https://github.com/winstonjs/winston
  • 0f092ca v3.9.0 package-lock & changelog
  • c77e117 Note what might be missing
  • b2bf0b3 Bump safe-stable-stringify from 2.4.0 to 2.4.3
  • c198523 move guard higher and add comment
  • 2609a55 attempt to fix haning streams issue
  • f8320c1 Bump @ babel/core from 7.20.7 to 7.20.12 (#2275)
  • 6926648 fix #1732 (#2272)
  • bf14c3b Typo fix in publishing doc
  • c7208a7 Bump @ types/node from 18.11.9 to 18.11.18 (#2264)
  • fe75342 Bump eslint from 8.30.0 to 8.32.0 (#2271)
  • 6b1c761 Bump json5 from 2.2.1 to 2.2.3 (#2260)
  • eec59af fix: properly allow passing non-arry transport (#2256)
  • 95af182 Bump @ babel/core from 7.20.2 to 7.20.7 (#2259)
Compare
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: šŸ§ [View latest project report](https://app.snyk.io/org/tonesto7/project/cfae5417-80ee-4fa0-a689-49b35642bc2b?utm_source=github&utm_medium=referral&page=upgrade-pr) šŸ›  [Adjust upgrade PR settings](https://app.snyk.io/org/tonesto7/project/cfae5417-80ee-4fa0-a689-49b35642bc2b/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) šŸ”• [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/tonesto7/project/cfae5417-80ee-4fa0-a689-49b35642bc2b/settings/integration?pkg=winston&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)