CASS
CASS copied to clipboard
[Snyk] Security upgrade pm2 from 5.3.0 to 5.3.1
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1 |
Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459 |
No | Proof of Concept |
![]() |
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857 |
No | Proof of Concept |
![]() |
661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Prototype Pollution SNYK-JS-AXIOS-6144788 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: pm2
The new version differs by 41 commits.- a092db2 [email protected]
- 3efe87e add testing on node 18.x
- b455ac9 update package-lock.json deps
- c4032e2 Update README.md
- c23da2f tt2
- 5b55a4d fix: testing
- cac8393 fix: terminal width for condensed listing
- b194ea7 fix python3 test
- f122aab #5682 add test for bun over ts and tsx
- 7bbe1a5 #5681 auto resolve python3 binary if available
- 135c123 #5682 #5675 - when starting a ts or tsx app automatically use bun instead of ts-node
- c62ac33 fix #5660 - loose checking
- 7edb012 [email protected]
- d68797a update README.md [skip ci]
- 2d145fd change issue template [skip ci]
- 500ef7d Merge pull request #5660 from bawjensen/fix-namespace-lines-0
- b2193ab #5678 fix
- 0530799 Merge pull request #5678 from karol-bujacek/bugfix/deploy-ecosystem-filename-extension
- dd19e3f Merge branch 'development' into bugfix/deploy-ecosystem-filename-extension
- 7912239 Merge pull request #5680 from juaneth/master
- 41fd475 Update README.md #5683
- e42f96c Update README.md #5684
- e7821a4 #5684
- 25d42ce switch from travis to github actions
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Cross-site Request Forgery (CSRF) 🦉 Regular Expression Denial of Service (ReDoS) 🦉 Prototype Pollution