search

zotoio / github-task-manager

receive github hook, notify agent, receive task results, notify github
MIT License
12 stars 4 forks source link

[Snyk] Fix for 2 vulnerabilities #213

Open wyvern8 opened 3 years ago

wyvern8 commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 Yes Proof of Concept
high severity 753/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.2		 Command Injection
SNYK-JS-LODASH-1040724		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: dynamodb-stream The new version differs by 29 commits.
  • 6134332 1.1.3
  • 7b5e2de chore: add test for ExpiredIteratorException
  • 45b474b chore: update readme
  • 43577aa omg, hate this
  • 9d40d5e Merge branch 'master' of https://github.com/ironsource/node-dynamodb-stream
  • c667d72 1.1.2
  • eb183fc fix: incorrect method for map, incorrect property access in error
  • ad28cca chore: fix examples
  • 96d6046 chore: get rid of remaining callback code
  • 9e5dbdf chore: fix example
  • 8f9345e chore: fix example
  • 3f4aa57 chore: update examples
  • c00740d Merge branch 'master' of https://github.com/ironsource/node-dynamodb-stream
  • 2afb74c chore: add example
  • 58a2631 remove that
  • 7ede255 Merge branch 'master' of https://github.com/ironsource/node-dynamodb-stream
  • a6ffe2d Merge branch 'master' of https://github.com/ironsource/node-dynamodb-stream
  • 8f7e100 Update README.md
  • 0c2d007 Update README.md
  • 8590721 chore: update readme
  • d2cacc6 1.1.1
  • 3fe35d8 chore: update readme and add example files
  • a330b28 1.1.0
  • fdaf88a chore: move all aws dependencies to devDependencies
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: šŸ§ View latest project report

šŸ›  Adjust project settings

šŸ“š Read more about Snyk's upgrade and patch logic