evernote-random
evernote-random copied to clipboard
Published
20 hours ago •
galtenberg
galtenberg
[Snyk] Security upgrade nodemon from 1.18.3 to 2.0.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5 |
Uncontrolled resource consumption SNYK-JS-BRACES-6838727 |
Yes | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: nodemon
The new version differs by 45 commits.- 9a67f36 feat: update chokidar to v3
- 6781b40 docs: add license file
- 0e6ba3c fix: wait for all subprocesses to terminate (fixes issue #1476)
- b58cf7d chore: Merge branch 'master'
- 95a4c09 docs: add to faq
- 3a2eaf7 choe: merge master
- 3d90879 chore: add logo to site
- 7d6c1a8 fix: Replace `jade` references by `pug`
- 74c8749 chore: test funding.yml change
- c1a8b75 chore: update funding
- d5b9891 test: ensure ignore relative paths
- eead311 fix: to avoid confusion like in #1528, always report used extension
- 12b66cd fix: langauge around "watching" (#1591)
- 2e6e2c4 docs: README Grammar (#1601)
- 5124ae9 Merge branch 'master' of github.com:remy/nodemon
- 95fa05a chore: git card
- d84f421 chore: adding funding file
- 13afac2 fix: ensure signal is sent to exit event
- d088cb6 chore: update stalebot
- 20ccb62 feat: add message event
- 886527f fix: disable fork only if string starts with dash
- 64b474e feat: add TypeScript to default execPath (#1552)
- 2973afb fix: Quote zero-length strings in arguments (#1551)
- aa41ab2 fix: hard bump of [email protected]
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Uncontrolled resource consumption
