cloudboost icon indicating copy to clipboard operation
cloudboost copied to clipboard
verified publisher icon CloudBoost

[Snyk] Fix for 1 vulnerabilities

Open nawazdhandala opened this issue 3 years ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • user-service/package.json
    • user-service/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 461/1000
Why? Recently disclosed, Has a fix available, CVSS 3.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-DEBUG-3227433		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: axios The new version differs by 64 commits.
  • 5c8095e Releasing 0.16.1
  • 982183c Updating changelog
  • fa58223 Merge pull request #828 from mzabriskie/feature/return-last-request-in-redirects
  • a18f039 Merge pull request #829 from jcready/patch-3
  • df6b46c Add caret
  • 04982a2 Update follow-redirects dependency
  • 19644ba Adding documentation for Buffer data
  • 1883344 support node buffers less than 8192 bytes (#773)
  • bbfbeff Minor grammar/line length changes (#547)
  • a784774 Adding comment about header names (#778)
  • 88cc84c Adding documentation for response.request
  • 84d9a41 Adding code to assign the last request to axios response
  • e5beab0 Adding test checking the request in axios response is the last in a redirect
  • 08eb985 Merge pull request #818 from carlosromel/patch-1
  • 21b43ed Merge pull request #826 from mzabriskie/github-templates
  • 34b63f8 Adding additional instruction line
  • bb57daa Adding templates for issues and pull requests
  • 23c4dfc Update README.md
  • a8dab57 Merge pull request #741 from model3volution/Update/readme
  • 19b7948 Releasing 0.16.0
  • e6ffc52 Updating Upgrage Guide
  • 8d675bb Merge branch 'master' of github.com:mzabriskie/axios
  • 5b904d5 Updating changelog
  • efc1f11 Merge pull request #781 from TomyJaya/TomyJaya-patch-1

See the full diff

Package name: mongoose The new version differs by 250 commits.
  • d4f507f chore: release 5.2.6
  • 7eac18c style: fix lint
  • e47b669 fix(populate): make error reported when no `localField` specified catchable
  • 1e27f09 test(populate): repro #6767
  • 2b5e18a fix(query): upgrade mquery for readConcern() helper
  • 2bf81e7 test: try skipping in before()
  • d5b43da test: more test fixes re: #6754
  • e91d404 test(transactions): skip nested suite if parent suite skipped
  • 22c6c33 fix(query): propagate top-level session down to `populate()`
  • 0f24449 test(query): repro #6754
  • bc21555 fix(document): handle overwriting `$session` in `execPopulate()`
  • f3af885 docs(schematypes): add some examples of getters and warning about using `map()` getters with array paths
  • 4071de4 Merge pull request #6771 from Automattic/gh6750
  • 12e0d09 fix(document): don't double-call deeply nested custom getters when using `get()`
  • 695cb6f test(document): repro #6779
  • 0ca947e docs(document): add missing params for `toObject()`
  • b0e1c5b fix(documentarray): use toObject() instead of cloning for inspect
  • 836eb53 refactor: use `driver.js` singleton rather than global.$MongooseDriver
  • 451c50e test: add quick spot check for webpack build
  • a0aaa82 Merge branch 'master' into gh6750
  • 88457b0 fix(document): use associated session `$session()` when using `doc.populate()`
  • 28621a5 test(document): repro #6754
  • 7965494 fix(connection): throw helpful error when using legacy `mongoose.connect()` syntax
  • 42ddc42 test(connection): repro #6756

See the full diff

Package name: socket.io The new version differs by 31 commits.
  • db831a3 [chore] Release 2.1.0
  • ac945d1 [feat] Add support for dynamic namespaces (#3195)
  • ad0c052 [docs] Add note in docs for `origins(fn)` about `error` needing to be a string. (#2895)
  • 1f1d64b [fix] Include the protocol in the origins check (#3198)
  • f4fc517 [fix] Properly emit 'connect' when using a custom namespace (#3197)
  • be61ba0 [docs] Add link to a Dart client implementation (#2940)
  • c0c79f0 [feat] Add support for dynamic namespaces (#3187)
  • dea5214 [chore] Bump superagent and supertest versions (#3186)
  • b1941d5 [chore] Bump engine.io to version 3.2.0
  • a23007a [docs] Update license year (#3153)
  • f48a06c [feat] Add a 'binary' flag (#3185)
  • 0539a2c [test] Update travis configuration
  • c06ac07 [docs] Fix typo (#3157)
  • 52b0960 [chore] Bump debug to version 3.1.0
  • 1c108a3 [chore] Release 2.0.4
  • f333479 [test] Use npm scripts instead of gulp (#3078)
  • 3f61165 [docs] Fix a grammar mistake in the API docs (#3076)
  • e26b71c [docs] Fix typo in API docs (#3066)
  • 3386e15 [docs] Actually prevent input from having injected markup in chat example (#2987)
  • 3684d59 [docs] Use path.join instead of concatenating paths (#3014)
  • dd69abb [fix] Reset rooms object before broadcasting from namespace (#3039)
  • 1f0e64a [fix] Do not throw when receiving an unhandled error packet (#3038)
  • 9d170a7 [docs] Add io.emit in the cheat sheet (#2992)
  • 7199d1b [docs] Fix misnamed 'Object.keys' in API docs (#2979)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

nawazdhandala avatar Jan 09 '23 17:01 nawazdhandala