foundation-v1-server
foundation-v1-server copied to clipboard
[Snyk] Upgrade pm2 from 5.2.0 to 5.3.1
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade pm2 from 5.2.0 to 5.3.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is 4 versions ahead of your current version.
- The recommended version was released 2 months ago, on 2024-01-20.
The recommended version fixes:
Severity | Issue | PriorityScore (*) | Exploit Maturity |
---|---|---|---|
![]() |
Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459 |
676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1 |
Proof of Concept |
![]() |
Prototype Pollution SNYK-JS-AXIOS-6144788 |
676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1 |
No Known Exploit |
![]() |
Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137 |
676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1 |
Proof of Concept |
![]() |
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857 |
676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1 |
Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: pm2
-
5.3.1 - 2024-01-20
- Fix terminal width when condensed cac8393
- Auto run tsx/ts files with bun binary instead of ts-node f122aab
- #5686 Switch from Travis CI to Github Actions
- #5680 Fixed reserved keyword for ES6 Strict Mode when Bundling @ juaneth
- #5683 update badges
- #5684 auto switch light and dark mode logos
- #5678 Bugfix/deploy ecosystem filename extension / esm module default ecosystem config name @ TeleMediaCC
- #5660 Fix matching logic for logs from namespace when lines = 0 @ bawjensen
- fix "vulnerabilities" in axios module
-
5.3.0 - 2023-03-15
- fix: replace non-working condition that blocks flush from clearing the logs #5533 @ Sailboat265
- fix: ESM script loader #5524 @ BlueWater86
- 5.2.2 - 2022-10-13
- 5.2.1 - 2022-10-13
-
5.2.0 - 2022-02-17
- replace node-cron by croner (#5183 #5035)
- upgrade mocha deps
- fix pm2 report when daemon not running
- remove semver check for legacy node.js versions
- update node version in setup.deb.sh by using lts (#5201) + openrc
- replace legacy util._extend by Object.assign (#5239)
- add missing start options types (#5242)
- recursive detection of package.json (#5267)
- make tarball module uninstall cross-platform (#5269)
- Fix unnecessary "ENOENT" console.error when serving a spa (#5272)
- fix: used env variable instead of hardcode datetime format (#5277)
- copyright update (#5278)
- fix: remove constants import from VersionCheck (not needed) (#5279)
- Reduce async import (#5280)
Commit messages
Package name: pm2
- a092db2 [email protected]
- 3efe87e add testing on node 18.x
- b455ac9 update package-lock.json deps
- c4032e2 Update README.md
- c23da2f tt2
- 5b55a4d fix: testing
- cac8393 fix: terminal width for condensed listing
- b194ea7 fix python3 test
- f122aab #5682 add test for bun over ts and tsx
- 7bbe1a5 #5681 auto resolve python3 binary if available
- 135c123 #5682 #5675 - when starting a ts or tsx app automatically use bun instead of ts-node
- c62ac33 fix #5660 - loose checking
- 7edb012 [email protected]
- d68797a update README.md [skip ci]
- 2d145fd change issue template [skip ci]
- 500ef7d Merge pull request #5660 from bawjensen/fix-namespace-lines-0
- b2193ab #5678 fix
- 0530799 Merge pull request #5678 from karol-bujacek/bugfix/deploy-ecosystem-filename-extension
- dd19e3f Merge branch 'development' into bugfix/deploy-ecosystem-filename-extension
- 7912239 Merge pull request #5680 from juaneth/master
- 41fd475 Update README.md #5683
- e42f96c Update README.md #5684
- e7821a4 #5684
- 25d42ce switch from travis to github actions
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🔕 Ignore this dependency or unsubscribe from future upgrade PRs