Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Upgrade libnpmexec from 4.0.3 to 4.0.14 #27

Open
wants to merge 1 commit into
base: latest
Choose a base branch
from

Conversation

Mhmonicox
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade libnpmexec from 4.0.3 to 4.0.14.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 11 versions ahead of your current version.
  • The recommended version was released a year ago, on 2022-11-03.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: libnpmexec
  • 4.0.14 - 2022-11-03
  • 4.0.13 - 2022-09-13
  • 4.0.12 - 2022-08-31
  • 4.0.11 - 2022-08-17
  • 4.0.10 - 2022-08-10
  • 4.0.9 - 2022-08-03
  • 4.0.8 - 2022-06-23
  • 4.0.7 - 2022-06-22
  • 4.0.6 - 2022-06-01
  • 4.0.5 - 2022-04-26
  • 4.0.4 - 2022-04-20
  • 4.0.3 - 2022-04-07
from libnpmexec GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants