Feathers-Vue
Feathers-Vue copied to clipboard
[Snyk] Security upgrade feathers-authentication-management from 0.4.2 to 3.0.1
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
| 619/1000 Why? Has a fix available, CVSS 8.1 |
Prototype Pollution SNYK-JS-AJV-584908 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: feathers-authentication-management
The new version differs by 136 commits.- 3700ad0 3.0.1
- 8ab729f revert version in package-lock.json.
- 9ddddcf reset version.
- 2285ce4 3.0.1
- 7ecefc6 Merge pull request #155 from feathersjs-ecosystem/notifierOptions
- c81b27d Add test coverage for notifierOptions.
- 247f8ab Added coverage for verify-signup-long.test.js -> updates verifies valid token... {} to { transport: 'sms' }
- 396dfb0 fix unit test issue in identity-change.test.js -> updates verified user... {} to 'password'
- a89ee3c Pass notifierOptions every were that notifier is called.
- 4650962 Merge pull request #154 from bwgjoseph/pr/upgrade-feathers-hooks-common
- 61d2c02 chore: bump feathers-hooks-common from 4.20.7 to 5.0.3
- 13d419d Fixed https://github.com/feathers-plus/feathers-authentication-management/issues/151
- 8ca9e93 Merge pull request #148 from Barbapapazes/master
- 6f06493 fix lint issue in docs
- e5d03e5 fix issue after save
- eed7a97 add more informations to docs
- 1339aa7 add documentations
- aed51a7 add support of swagger docs
- 9940c28 Merge pull request #147 from feathers-plus/dependabot/npm_and_yarn/lodash-4.17.19
- c07ec65 Bump lodash from 4.17.15 to 4.17.19
- 1477615 Update README.md
- 600302d Updating changelog
- f6c3557 3.0.0
- f7ba07a Updated npmignore
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report