[Snyk] Upgrade npm from 9.7.2 to 9.9.2

Open capslock66 opened this issue 2 years ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade npm from 9.7.2 to 9.9.2.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 5 versions ahead of your current version.
The recommended version was released 4 months ago, on 2023-11-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	751/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.6	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: npm

9.9.2 - 2023-11-15
9.9.2 (2023-11-14)

Bug Fixes
- 4c9a5e1 #6993 look in workspace for exec commands (#6993) (@ wraithgar)
- bb6f496 #6992 correctly handle object licenses in SBOM generation (#6992) (@ bdehamer, @ jamietanna)
- 10db3ca #6990 pkg: properly output in workspace mode (#6990) (@ wraithgar)
Documentation
- 6ab06d7 #6985 update npm-prune description (#6985) (@ Eomm)
Dependencies
- Workspace: [email protected]
9.9.1 - 2023-11-07
9.9.1 (2023-10-30)

Bug Fixes
- 0dba79a #6942 add back bin/node-gyp-bin/node-gyp files (@ lukekarrys)
- c93edb5 #6932 add back bin/node-gyp-bin/node-gyp files (@ lukekarrys)
Documentation
- e6cce28 #6925 use markdown links instead of html (@ lukekarrys)
9.9.0 - 2023-10-06
9.8.1 - 2023-07-19
9.8.0 - 2023-07-05
9.7.2 - 2023-06-21