Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

[Snyk] Fix for 1 vulnerabilities #38

Open
wants to merge 1 commit into
base: latest
Choose a base branch
from
Open

[Snyk] Fix for 1 vulnerabilities #38

wants to merge 1 commit into from

Conversation

bumplzz69
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		 Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: bin-links The new version differs by 28 commits.
  • ca8aad2 2.0.0
  • 5ce48a1 docs: update for v2
  • 3af8c54 ignore most things
  • 3344f8d changelog for v2
  • a1272ee v2 implementation
  • d35c9b2 tests for v2
  • 675263d deps for new version
  • 2f8c1fa license: Artistic 2.0 -> ISC
  • 49c3151 chore: only support live nodes
  • 2c6fb91 fix: do not require a log option
  • 3fa88fa chore: update CLI dev environment
  • ee939c0 chore: Use native Promises instead of Bluebird
  • 32132c9 chore(release): 1.1.7
  • 0bbd303 fix: resolve folder that is passed in
  • f315830 chore(release): 1.1.6
  • 642cd18 fix: prevent improper clobbering of man/bin links
  • bc69419 update travis
  • 52e6525 chore(release): 1.1.5
  • b3cfd2e fix: don't filter out ./ man references
  • 181e36d github settings
  • fe39e10 chore(release): 1.1.4
  • 25a34f9 fix: sanitize and validate bin and man link targets
  • 02bb9e1 chore(deps): add npm-normalize-package-bin module
  • 24324d3 chore(release): 1.1.3

See the full diff

Package name: glob The new version differs by 137 commits.
  • a68703e 9.0.0
  • 58159ca test: cwd can be a url
  • a547a9c more docs
  • 42a3ac7 link to bash manual for Pattern Matching
  • 474172d update readme with cwd URL support
  • ad3904d update readme with posix class support
  • b22fc7d minimatch@7.3.0
  • cdd1627 update all the things, remove unused mkdirp types
  • 75c6416 Merge branch 'v9'
  • fa0cd77 cwd can be a file:// url
  • d03ed0a typedoc github action
  • 9a5a45a put bench results in readme
  • 20b2f88 docs, fix benchmark script
  • 4829c88 upgrade ci actions
  • 5cbacdd minimatch@7.2.0
  • 210310b omit symlinks on windows
  • d34c8d5 full test coverage, clean up signals and remove extranous code
  • 5f21b46 adding lots of tests, clean up types
  • b12e6ba slashes on nodir test
  • 75f74b0 more windows test slashes
  • 3aa1abd more windows test affordances
  • 3e68a7b some windows test affordances
  • 8c2e082 feature complete and tests passing
  • c3be35a correct ** vs ./** behavior

See the full diff

Package name: init-package-json The new version differs by 82 commits.

See the full diff

Package name: node-gyp The new version differs by 250 commits.

See the full diff

Package name: npm-lifecycle The new version differs by 7 commits.
  • cf5f5ca chore(release): 2.1.1
  • dbbfe27 deps: bump deps to fix security advisories
  • e96f550 deps: update node-gyp to v4.0.0
  • f6cef1c chore: update CI for current Node LTS
  • c137ac7 deps: bump devDeps
  • 62c07d3 deps: bump deps
  • 220cd70 fix(test): update postinstall script for fixture

See the full diff

Package name: npm-registry-fetch The new version differs by 209 commits.

See the full diff

Package name: pacote The new version differs by 250 commits.

See the full diff

Package name: rimraf The new version differs by 62 commits.
  • 3b6b098 4.0.0
  • e0cffea ci: reduce workload even more
  • 0e6646d ci: remove unnecessary lint filter
  • 546e017 update action versions
  • 6d88a65 tone down benchmark intensity
  • 842a8d2 fix benchmark workflow yaml
  • 1b91697 chore: add copyright year to license
  • 08bbb06 rewrite in TS, export hybrid, update changelog, docs
  • 1b3f46e drop support for node versions below 14
  • 2e1f003 gh actions workflow for benchmarks
  • 52f9370 tests for retry-busy behavior
  • 188e3ed don't test on very old node versions
  • d1d5495 test for fix-eperm
  • e7501cd prettier formatting
  • 40f64ec windows: only fall back to move-remove when absolutely necessary
  • b6f7819 update tap
  • 99496cd test: run posix test on windows, why not?
  • 51d43c1 benchmarks
  • 6b8aa29 doc: correct os.tmp default
  • 4b228c9 do not ever actually try to rmdir /
  • 2442655 consolidate all the spellings of 'opt' into one
  • d4eec2e add cli script
  • 0c82d74 accept strings, arrays of strings, and no other types
  • ad4f2db Do not rimraf /, override with preserveRoot:false

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

# for free to join this conversation on GitHub. Already have an account? # to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@bumplzz69 @snyk-bot