advancing-safely-class-nodebr
advancing-safely-class-nodebr copied to clipboard
Code produced in a meetup where I taught about security in the development of APIs in Node.js by NodeBR.
This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of...
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...
Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project. #### Changes included in this PR - Changes to the following...
Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...
Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.  #### Changes included in this PR - Changes to...
Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.12.2 to 6.12.6. Release notes Sourced from ajv's releases. v6.12.6 Fix performance issue of "url" format. v6.12.5 Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords...
Bumps [tar](https://github.com/npm/node-tar) from 4.4.13 to 4.4.19. Commits 9a6faa0 4.4.19 70ef812 drop dirCache for symlink on all platforms 3e35515 4.4.18 52b09e3 fix: prevent path escape using drive-relative paths bb93ba2 fix: reserve...
Snyk has created this PR to upgrade express-rate-limit from 5.2.3 to 5.3.0.  :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more...
Snyk has created this PR to upgrade dotenv from 8.2.0 to 8.6.0.  :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more...
Snyk has created this PR to upgrade knex from 0.21.2 to 0.95.8.  :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more...