massdm icon indicating copy to clipboard operation
massdm copied to clipboard

[Snyk] Security upgrade discord.js from 11.6.4 to 13.14.0

Open alexlyee opened this issue 1 year ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: discord.js The new version differs by 250 commits.
  • 81b358c chore(discord.js): release [email protected]
  • af6a0e5 fix(ThreadChannel): fetch starter message properly (#9217)
  • e15b70f Fix a rare error regarding interactions (#9218)
  • df68520 fix(Actions): inject built data by using a symbol (#9204)
  • 4bc25c4 feat: add support for gif stickers (v13) (#9158)
  • 120270e feat: v13 support `SUPPRESS_NOTIFICATIONS` flag (#9184)
  • 9f7d1f3 chore(discord.js): release [email protected] (#9156)
  • 224f21c fix(Constants): enum creation error (#9155)
  • 7f1735d chore(discord.js): release [email protected] (#9154)
  • fd494a3 feat(GuildMemberManager): add `addRole` and `removeRole` methods (#9108)
  • b586df8 ci: create publish release workflow v13 (#9151)
  • 0188e36 feat(WebSocketShard): v13 add resume url (#9078)
  • 84d34dc feat: v13 `guildAuditLogEntryCreate` event (#9092)
  • 7737bbe ci: add pull request triage and Kodiak merge workflow (#9109)
  • 61fa6f4 feat(Constants): add auto moderation events to WSEvents (#9102)
  • 0afa405 feat: role subscriptions (#9040)
  • eed293f fix: minor forums cleanup (#9033)
  • 86329ad feat(GuildChannelManager): add `addFollower` (#9050)
  • 69d71e9 feat(Guild): add `INVITES_DISABLED` feature support (#9051)
  • a7dc40f feat(ClientApplication): add role connections (#9072)
  • 32cdaff feat(Webhook): add `channel` getter (#9074)
  • 123d0f1 fix(InteractionResponses): spell `messages` correctly (#9080)
  • d69529e feat(GuildMember): add `flags` (#9098)
  • c2968b5 feat: `applicationCommandPermissionsUpdate` event (#9121)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

alexlyee avatar Dec 20 '23 14:12 alexlyee