Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Security upgrade mocha from 9.1.1 to 9.1.2 #258

Merged
merged 1 commit into from
Dec 3, 2021

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: mocha The new version differs by 10 commits.
  • 18a1055 build(v9.1.2): release
  • 011a5a4 fix: regex in 'update-authors.js'
  • 06f3f63 build(v9.1.2): update CHANGELOG [ci skip]
  • a87461c chore(deps): remove 'wide-align' (#4754)
  • c7f56d1 docs: how to use 'rootHooks' in the browser (#4755) [ci skip]
  • 8421974 fix(browser): stop using all global vars in 'browser-entry' (#4746)
  • 27bfc74 docs: add complete '--delay' example (#4744) [ci skip]
  • 4860738 chore(devDeps): update 'eslint' and its plugins (#4737)
  • abfddf8 docs: fix broken table width under 450 screen width (#4734)
  • 97b8470 chore(esm): remove code for Node versions <10 (#4736)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

@snyk-bot snyk-bot requested a review from badsyntax as a code owner October 16, 2021 06:52
@badsyntax badsyntax merged commit 6c5e1e3 into master Dec 3, 2021
@badsyntax badsyntax deleted the snyk-fix-34523794a972c2758dd81b8181b5137a branch December 3, 2021 12:39
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants