nodeclub
nodeclub copied to clipboard
[Snyk] Security upgrade log4js from 0.6.38 to 6.4.0
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
| 561/1000 Why? Recently disclosed, Has a fix available, CVSS 5.5 |
Information Exposure SNYK-JS-LOG4JS-2348757 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: log4js
The new version differs by 250 commits.- 9fdbed5 6.4.0
- 788c7a8 Merge pull request #1150 from log4js-node/update-changelog
- 7fdb141 chore: updated changelog for 6.4.0
- e6bd888 Merge pull request #1151 from log4js-node/feat-zero-backup
- ac599e4 allow for zero backup - in sync with https://github.com/log4js-node/streamroller/pull/74
- 53248cd Merge pull request #1149 from log4js-node/migrate-daysToKeep-to-numBackups
- 436d9b4 Merge pull request #1148 from log4js-node/update-docs
- d6b017e chore(docs): updated fileSync.md and misc comments
- d4617a7 chore(deps): migrated from daysToKeep to numBackups due to streamroller@^3.0.0
- 0ad0133 Merge pull request #1147 from log4js-node/update-deps
- 773962b Merge pull request #1146 from log4js-node/update-deps
- 823bb46 Merge pull request #1145 from log4js-node/update-deps
- 6cc0035 chore(deps): bump streamroller from 3.0.1 to 3.0.2
- 0f39859 chore(deps): bump date-format from 4.0.2 to 4.0.3
- 85ac31e chore(deps-dev): bump eslint from from 8.6.0 to 8.7.0
- acd41ef Merge pull request #1144 from log4js-node/refactor
- 4c4bbe8 chore(refactor): using writer.writable instead of alive for checking
- e86a809 Merge pull request #1097 from 4eb0da/datefile-error-handling
- 34ab3b2 Merge pull request #1143 from log4js-node/update-test
- 8cba85f chore(test): renamed tap.teardown() to tap.tearDown() for consistency (while both works, only tap.tearDown() is documented)
- a0baec2 chore(test): fixed teardown() causing tests to fail due to fs errors on removal
- 51ac865 Merge pull request #1103 from polo-language/recording-typescript
- 653a20f Merge pull request #1028 from techmunk/master
- 43a2199 chore(test): Changed default TAP test suite timeout from 30s to 45s because Windows takes a long time
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report