Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

[Snyk] Fix for 1 vulnerabilities #16

Open
wants to merge 1 commit into
base: latest
Choose a base branch
from
Open

[Snyk] Fix for 1 vulnerabilities #16

wants to merge 1 commit into from

Conversation

kevinjm39
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		 Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @npmcli/arborist The new version differs by 250 commits.

See the full diff

Package name: @npmcli/run-script The new version differs by 107 commits.

See the full diff

Package name: glob The new version differs by 116 commits.
  • a68703e 9.0.0
  • 58159ca test: cwd can be a url
  • a547a9c more docs
  • 42a3ac7 link to bash manual for Pattern Matching
  • 474172d update readme with cwd URL support
  • ad3904d update readme with posix class support
  • b22fc7d minimatch@7.3.0
  • cdd1627 update all the things, remove unused mkdirp types
  • 75c6416 Merge branch 'v9'
  • fa0cd77 cwd can be a file:// url
  • d03ed0a typedoc github action
  • 9a5a45a put bench results in readme
  • 20b2f88 docs, fix benchmark script
  • 4829c88 upgrade ci actions
  • 5cbacdd minimatch@7.2.0
  • 210310b omit symlinks on windows
  • d34c8d5 full test coverage, clean up signals and remove extranous code
  • 5f21b46 adding lots of tests, clean up types
  • b12e6ba slashes on nodir test
  • 75f74b0 more windows test slashes
  • 3aa1abd more windows test affordances
  • 3e68a7b some windows test affordances
  • 8c2e082 feature complete and tests passing
  • c3be35a correct ** vs ./** behavior

See the full diff

Package name: init-package-json The new version differs by 28 commits.

See the full diff

Package name: libnpmaccess The new version differs by 250 commits.

See the full diff

Package name: libnpmdiff The new version differs by 250 commits.

See the full diff

Package name: libnpmexec The new version differs by 250 commits.

See the full diff

Package name: libnpmfund The new version differs by 250 commits.

See the full diff

Package name: libnpmhook The new version differs by 250 commits.

See the full diff

Package name: libnpmorg The new version differs by 250 commits.

See the full diff

Package name: libnpmpack The new version differs by 250 commits.

See the full diff

Package name: libnpmpublish The new version differs by 250 commits.

See the full diff

Package name: libnpmsearch The new version differs by 250 commits.

See the full diff

Package name: libnpmteam The new version differs by 250 commits.

See the full diff

Package name: libnpmversion The new version differs by 250 commits.

# for free to join this conversation on GitHub. Already have an account? # to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@kevinjm39 @snyk-bot