Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

[Snyk] Upgrade npm from 6.2.0 to 6.13.7 #124

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade npm from 6.2.0 to 6.13.7 #124

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade npm from 6.2.0 to 6.13.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 47 versions ahead of your current version.
  • The recommended version was released a month ago, on 2020-01-28.

The recommended version fixes:

Severity Issue Exploit Maturity
Arbitrary File Overwrite
SNYK-JS-TAR-174125		 No Known Exploit
Arbitrary File Write
SNYK-JS-NPM-537606		 Proof of Concept
Arbitrary File Overwrite
SNYK-JS-NPM-537603		 Proof of Concept
Arbitrary File Overwrite
SNYK-JS-FSTREAM-174725		 No Known Exploit
Arbitrary File Write
SNYK-JS-BINLINKS-537610		 Proof of Concept
Arbitrary File Overwrite
SNYK-JS-BINLINKS-537608		 Proof of Concept
Denial of Service (DoS)
npm:mem:20180117		 No Known Exploit
Man-in-the-Middle (MitM)
SNYK-JS-HTTPSPROXYAGENT-469131		 Proof of Concept
Unauthorized File Access
SNYK-JS-NPM-537604		 Proof of Concept
Unauthorized File Access
SNYK-JS-BINLINKS-537609		 Proof of Concept
Release notes
Package name: npm from npm GitHub release notes
Commit messages
Package name: npm
  • f533d61 6.13.7
  • 5897df4 update AUTHORS
  • dcafdd9 updated changelog for npm@6.13.7
  • 0fb1296 libnpx@10.2.2
  • 1a5d209 chore: removed reference to package.community as a source for npm team support
  • 68fc88e docs: updated the CONTRIBUTING file; added references to benchmarking
  • 1ce0344 feat: updated workflow for pull-ruquest benchmark dispatch requests
  • 5967fa4 feat: added workflow file for commenting on a pull-request to dispatch trigger benchmark suite
  • 3590e40 fix: removed authorization header from benchmark dispatch request
  • c9b69d5 node-gyp@5.0.7
  • e8dbaf4 bin-links@1.1.7
  • 7230e13 docs: fix header parsing that was breaking misc config manpage
  • 7dbb914 Update CI detection cases
  • 7852c0c Use the npm lint script on CI.
  • b1aeeb6 docs: mention --no-optional in package-json
  • 88cfb88 chore: fixes nodejs tests
  • ac3739f 6.13.6
  • c56c847 docs: changelog for 6.13.6
  • 6dba897 pacote@9.5.12
  • 787bb66 6.13.5
  • e099866 update AUTHORS
  • 4812866 docs: changelog for 6.13.5
  • 6fb5dbb npm-link: clarify usage of global prefix
  • 4b30f3c feat(version): using 'allow-same-version', git commit --allow-empty and git tag -f

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[//]: # (snyk:metadata:{"dependencies":[{"name":"npm","from":"6.2.0","to":"6.13.7"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/phillipgraniero-rxi/project/2958b718-1a0e-4eb7-bf1f-99ec96c329f3?utm_source=github&utm_medium=upgrade-pr","projectPublicId":"2958b718-1a0e-4eb7-bf1f-99ec96c329f3","env":"prod","prType":"upgrade","vulns":["SNYK-JS-TAR-174125","SNYK-JS-NPM-537606","SNYK-JS-NPM-537603","SNYK-JS-FSTREAM-174725","SNYK-JS-BINLINKS-537610","SNYK-JS-BINLINKS-537608","npm:mem:20180117","SNYK-JS-HTTPSPROXYAGENT-469131","SNYK-JS-NPM-537604","SNYK-JS-BINLINKS-537609"],"issuesToFix":[{"issueId":"SNYK-JS-TAR-174125","severity":"high","title":"Arbitrary File Overwrite","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-NPM-537606","severity":"high","title":"Arbitrary File Write","exploitMaturity":"proof-of-concept"},{"issueId":"SNYK-JS-NPM-537603","severity":"high","title":"Arbitrary File Overwrite","exploitMaturity":"proof-of-concept"},{"issueId":"SNYK-JS-FSTREAM-174725","severity":"high","title":"Arbitrary File Overwrite","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-BINLINKS-537610","severity":"high","title":"Arbitrary File Write","exploitMaturity":"proof-of-concept"},{"issueId":"SNYK-JS-BINLINKS-537608","severity":"high","title":"Arbitrary File Overwrite","exploitMaturity":"proof-of-concept"},{"issueId":"npm:mem:20180117","severity":"medium","title":"Denial of Service (DoS)","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-HTTPSPROXYAGENT-469131","severity":"medium","title":"Man-in-the-Middle (MitM)","exploitMaturity":"proof-of-concept"},{"issueId":"SNYK-JS-NPM-537604","severity":"low","title":"Unauthorized File Access","exploitMaturity":"proof-of-concept"},{"issueId":"SNYK-JS-BINLINKS-537609","severity":"low","title":"Unauthorized File Access","exploitMaturity":"proof-of-concept"}],"upgrade":["SNYK-JS-TAR-174125","SNYK-JS-NPM-537606","SNYK-JS-NPM-537603","SNYK-JS-FSTREAM-174725","SNYK-JS-BINLINKS-537610","SNYK-JS-BINLINKS-537608","npm:mem:20180117","SNYK-JS-HTTPSPROXYAGENT-469131","SNYK-JS-NPM-537604","SNYK-JS-BINLINKS-537609"],"upgradeInfo":{"versionsDiff":47,"publishedDate":"2020-01-28T19:09:13.959Z"},"templateVariants":[],"hasFixes":true,"isMajorUpgrade":false,"isBreakingChange":false})

@snyk-bot snyk-bot mentioned this pull request Apr 16, 2021
Open
@snyk-bot snyk-bot mentioned this pull request Aug 17, 2021
Open
@snyk-bot snyk-bot mentioned this pull request Oct 8, 2021
Open
@snyk-bot snyk-bot mentioned this pull request Feb 26, 2022
Open
# for free to join this conversation on GitHub. Already have an account? # to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@snyk-bot