rss-fulltext-proxy
rss-fulltext-proxy copied to clipboard
[Snyk] Security upgrade redis from 2.8.0 to 3.1.1
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-REDIS-1255645 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: redis
The new version differs by 142 commits.- fc28860 Bump version to 3.1.1 (#1597)
- 2d11b6d fix #1569 - improve monitor_regex (#1595)
- 7e77de8 Add Chat (#1594)
- 5d3e995 Merge branch 'master' of https://github.com/NodeRedis/node-redis
- b797cf2 add user to README.md
- 79f34c2 Bump version to 3.1.0 (#1590)
- 7fdc54e fix for 428e1c8a7b2322c2650294638cb1663ac5692728 - fix auth retry when redis is in loading state
- 09f0fe8 "fix" tests
- 428e1c8 Add support for Redis 6 `auth pass [user]` (#1508)
- bb208d0 Add codeclimate badge (#1572)
- 47e2e38 Exclude examples from deepsource (#1579)
- fbca5cd Upgrade node and dependencies (#1578)
- 2188744 Create codeql-analysis.yml (#1577)
- 32861b5 Create .deepsource.toml (#1574)
- 2a34d41 Add LGTM badge (#1571)
- 69b7094 Workflows fixes (#1570)
- 49c4131 Merge pull request #1531 from marnikvde/improve-docs
- 3c8ff5c Merge branch 'master' into improve-docs
- 685a72d Merge pull request #1277 from dcharbonnier/patch-1
- 055f5c5 Merge branch 'master' into patch-1
- c78b6d5 Merge pull request #1527 from heynikhil/patch-1
- 53f1468 Merge branch 'master' into patch-1
- 232f191 Merge pull request #1563 from lebseu/patch-1
- e4cb073 Update README.md
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report