raml-client-generator icon indicating copy to clipboard operation
raml-client-generator copied to clipboard

[Snyk] Fix for 7 vulnerabilities

Open svc-ast-gh-snyk5 opened this issue 1 year ago • 0 comments

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 484/1000
Why? Has a fix available, CVSS 5.4
Open Redirect
SNYK-JS-GOT-2932019
Yes No Known Exploit
low severity 506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
Prototype Pollution
SNYK-JS-MINIMIST-2429795
Yes Proof of Concept
medium severity 601/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6
Prototype Pollution
SNYK-JS-MINIMIST-559764
Yes Proof of Concept
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599
Yes Proof of Concept
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090600
Yes Proof of Concept
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601
Yes Proof of Concept
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: raml-generator The new version differs by 18 commits.
  • c9eea65 remove not needed typings.json
  • 645f0b1 Fix typings issue
  • 6bb0646 Update typescript and parser version
  • 23084d9 Merge pull request #16 from jayS-de/update_raml_parser
  • d8bfc53 test(Generator): test include api as json
  • 03c4840 test(Parser): add test for correct loading and parsing of complex API example
  • fcca3e3 lint fixes
  • 78c7a40 add possibility to expand libraries
  • ef068ff revert update to typescript v2
  • 6dbbea8 update raml-js-parser-2 version
  • 4ec86fa v1.0.0-3
  • a6b8fb6 Fix bug with args
  • c43c66a v1.0.0-2
  • bb0c353 Add annotations RAML file to package
  • dee99e1 v1.0.0-1
  • 5aafe48 Fix missing .d.ts file
  • 54e1687 v1.0.0-0
  • dc8f070 Updated to RAML 1.0 AST

See the full diff

Package name: raml-javascript-generator The new version differs by 9 commits.
  • 59ed6e8 feat(raml1&refactor): Raml 1.0 Support and Refactor (#19)
  • 4f2d0c6 Remove dead bower config
  • 0d35882 Remove dead lib/ folder
  • 6f34e1c v1.0.0-0
  • 32d305d Merge pull request #6 from mulesoft-labs/raml-1
  • f95f8a0 Support RAML 1.0
  • 93c516a Merge pull request #7 from bigbam505/bmontague-allow-global-options
  • 44dc486 Allow for global options to be passed in by an options object
  • 5015ebf Allow global options to be applied to each request

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect 🦉 Prototype Pollution 🦉 Regular Expression Denial of Service (ReDoS)

svc-ast-gh-snyk5 avatar Nov 29 '23 02:11 svc-ast-gh-snyk5