cli
cli copied to clipboard
[Snyk-dev] Security upgrade debug from 1.0.5 to 2.6.9
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- test/fixtures/basic-npm/package.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
399/1000 Why? Has a fix available, CVSS 3.7 |
Regular Expression Denial of Service (ReDoS) npm:debug:20170905 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: debug
The new version differs by 210 commits.- 13abeae Release 2.6.9
- f53962e remove ReDoS regexp in %o formatter (#504)
- 52e1f21 Release 2.6.8
- 2482e08 Check for undefined on browser globals (#462)
- 6bb07f7 release 2.6.7
- 15850cb Fix Regular Expression Denial of Service (ReDoS)
- 4a6c85c update "debug" to v1.0.0 (#454)
- b68dbf8 Fix typo (#455)
- 1351d2f Inline extend function in node implementation (#452)
- c211947 update version for component
- 14df14c release 2.6.5
- cae07b7 cleanup browser tests and fix null reference check on window.documentElement.style.WebkitAppearance (#447)
- f311b10 release 2.6.4
- 1f01b70 Fix bug that would occure if process.env.DEBUG is a non-string value. (#444)
- 2f3ebf4 Update CHANGELOG.md
- f5ae332 Update CHANGELOG.md
- 9742c5f chore(): ignore bower.json in npm installations. (#437)
- 27d93a3 update "debug" to v0.7.3
- 9dc30f8 release 2.6.3
- 0fb8ea4 LocalStorage returns undefined for any key not present (#431)
- ce4d93e changelog fix
- 017a9d6 release 2.6.2
- 23bc780 fix DEBUG_MAX_ARRAY_LENGTH
- 065cbfb Add backers and sponsors from Open Collective (#422)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.