extension
extension copied to clipboard
[Snyk] Security upgrade url-parse from 1.4.7 to 1.5.0
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3 |
Improper Input Validation SNYK-JS-URLPARSE-1078283 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: url-parse
The new version differs by 12 commits.- 267a0c6 [dist] 1.5.0
- d1e7e88 [security] More backslash fixes (#197)
- d99bf4c [ignore] Remove npm-debug.log from .gitignore
- 422c8b5 [pkg] Replace nyc with c8
- 933809d [pkg] Move coveralls to dev dependencies
- 190b216 [pkg] Add .npmrc
- ce3783f [test] Do not test on all available versions of Edge and Safari
- 77c1184 [pkg] Update mocha to version 8.0.1
- 673c3a7 [travis] Test on node 14
- 08fd2cc [pkg] Update mocha to version 7.0.1 (#189)
- 3ce7824 [pkg] Update nyc to version 15.0.0 (#188)
- ed3f534 [travis] Add node 12 and remove node 6
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report