Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Upgrade commander from 6.0.0 to 6.2.1 #4

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

apiiro-snyk
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade commander from 6.0.0 to 6.2.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 3 versions ahead of your current version.

  • The recommended version was released on 4 years ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
169 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970
169 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
169 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
169 Proof of Concept
high severity Prototype Pollution
SNYK-JS-UNSETVALUE-2400660
169 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905
169 Proof of Concept
Release notes
Package name: commander
  • 6.2.1 - 2020-12-14

    Fixed

    • some tests failed if directory path included a space (1390)
  • 6.2.0 - 2020-10-25

    Added

    • added 'tsx' file extension for stand-alone executable subcommands (#1368)
    • documented second parameter to .description() to describe command arguments (#1353)
    • documentation of special cases with options taking varying numbers of option-arguments (#1332)
    • documentation for terminology (#1361)

    Fixed

    • add missing TypeScript definition for `.addHelpCommand()' (#1375)
    • removed blank line after "Arguments:" in help, to match "Options:" and "Commands:" (#1360)

    Changed

    • update dependencies
  • 6.1.0 - 2020-08-28

    Added

    • include URL to relevant section of README for error for potential conflict between Command properties and option values (#1306)
    • .combineFlagAndOptionalValue(false) to ease upgrade path from older versions of Commander (#1326)
    • allow disabling the built-in help option using .helpOption(false) (#1325)
    • allow just some arguments in argumentDescription to .description() (#1323)

    Changed

    • tidy async test and remove lint override (#1312)

    Fixed

    • executable subcommand launching when script path not known (#1322)
  • 6.0.0 - 2020-07-19

    Added

    • add support for variadic options (#1250)
    • allow options to be added with just a short flag (#1256)
      • Breaking the option property has same case as flag. e.g. flag -n accessed as opts().n (previously uppercase)
    • Breaking throw an error if there might be a clash between option name and a Command property, with advice on how to resolve (#1275)

    Fixed

    • Options which contain -no- in the middle of the option flag should not be treated as negatable. (#1301)
from commander GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade commander from 6.0.0 to 6.2.1.

See this package in npm:
commander

See this project in Snyk:
https://app.snyk.io/org/apiiro-snyk/project/ad460f3e-a430-4b53-881c-5d27c670d761?utm_source=github&utm_medium=referral&page=upgrade-pr
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants