pump.io
pump.io copied to clipboard
[Snyk] Security upgrade emailjs from 2.2.0 to 3.0.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
| 490/1000 Why? Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-RAMDA-1582370 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: emailjs
The new version differs by 122 commits.- 4995578 Merge pull request #251 from eleith/emailjs-3.0
- d83de8a remove bundle
- 72f45ac bump to 3.0 and build bundles
- 37ace28 chore: re-add old bundle
- 53c7087 smtp: rename SMTPResponse -> SMTPResponseMonitor
- 3355154 smtp: rename Client -> SMTPClient
- 5b4f95a test: nits
- 95d94c2 test/auth: add XOAUTH2 units
- 8f1f9ef test/auth: use AUTH_METHODS enum
- 72feca9 test: use destructured imports
- d4ebf37 chore: update readme
- 8a62345 email: add response module to public api
- 6d8ad46 smtp: rename smtp.ts -> connection.ts
- a2da2dd smtp: drop namespaces from re-exports
- d42f95e smtp/error: convert makeSMTPError to static method of exported SMTPError class
- 7b758cc test/client: correctness nit
- efd3267 test/auth: verify methods work both encrypted & not
- 6a1a707 test/auth: add no authentication unit
- 6461e05 chore: nits
- 66d4d7f test: sort auth & client units by file
- b76a198 test: use finally instead of then+catch
- c43189f smtp/client: update createMessageStack documentation
- 5720441 chore: move bundled deps to devDependencies
- 6a5833b smtp/client: use destructuring instead of indexing into array
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons: