wambugucoder / MERN-STACK-APP-FCC-CHALLENGE

A Polling App integrated with a chatbot to help people understand how the App works
1 stars 1 forks source link

[Snyk] Upgrade validator from 13.5.1 to 13.11.0 #604

Open wambugucoder opened 1 year ago

wambugucoder commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade validator from 13.5.1 to 13.11.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **5 versions** ahead of your current version. - The recommended version was released **4 months ago**, on 2023-08-04. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-VALIDATOR-1090602](https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090602) | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Proof of Concept | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-VALIDATOR-1090599](https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090599) | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Proof of Concept | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-VALIDATOR-1090600](https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090600) | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Proof of Concept | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-VALIDATOR-1090601](https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090601) | **586/1000**
**Why?** Proof of Concept exploit, Has a fix available, CVSS 5.3 | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: validator

  • 13.5.1 - 2020-11-30
    Read more
  • </ul>
    from <a href="https://snyk.io/redirect/github/validatorjs/validator.js/releases">validator GitHub release notes</a>

    Commit messages
    Package name: validator
    • f074abd 13.11.0
    • 6be9634 feat(isEmail) extend to enable allow_underscores in domain (#2229)
    • 2f551c6 fix(isMobilePhone): fixed pl-PL matching numbers that start with 45 (#2202)
    • ad41eba feat(IsFQDN): Add a test that asserts numeric chars in tld are rejected by default (#2222)
    • f303d39 feat(isIBAN): add white and blacklist options to the isIBAN validator (#2235)
    • 2ef9a83 feat(isMobilePhone): Added regex for Sudan ar-SD (#2246)
    • 2440c39 feat(isIBAN): add Morocco (MA) IBAN format (#2025)
    • 4c25f26 refactor(isCreditCard): create allCards dynamically (#2117)
    • 3507d27 fix(isJWT): fix validation issue in isJWT function (#2217)
    • 63b1e4d fix(isEmail) do not allow non-breaking space in user part (#2237)
    • 4f63909 feat(isAlpha, isAlphanumeric): add kazakh locale, kk-KZ (#2226)
    • df1351a fix(isDate): enhance Date declaration compatibility across multiple environments (#2231)
    • 9ba1735 new validator: isMailtoURI, validate the mailto link URI format (#2188)
    • fc49ad7 new validator: isLocale, add support for validation of more valid language tags (#2189)
    • 698f4e6 fix(isVAT): corrected validation for Swiss (CH) locale (#2203)
    • 9e73a1c feat(isMobilePhone): add locales Wallis and Futuna fr-WF (#2209)
    • cb91971 fix(isMobilePhone): fixed es-CU matching all numbers that start with 5 longer than 8 digits (#2197)
    • 43803c0 chore: add note about providing a reference in PR template (#2161)
    • 0188a95 fix(docs): add missing locale fr-CF (#2178)
    • 7cda875 feat(isMobilePhone): add fr-CF locale (#2176)
    • ecce35f feat(isMobilePhone): add locale so-SO (#2175)
    • 78f25ba feat(isFreightContainerID): add new validator (#2144)
    • 54d330c 13.9.0
    • d423220 fix: few pre-release fixes
    Compare

    Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

    For more information:

    🧐 View latest project report

    🛠 Adjust upgrade PR settings

    🔕 Ignore this dependency or unsubscribe from future upgrade PRs