Skip to content
This repository was archived by the owner on May 19, 2025. It is now read-only.

Conversation

erpranavjoshi
Copy link

snyk-top-banner

Snyk has created this PR to fix 19 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Arbitrary Code Injection
SNYK-JS-XMLHTTPREQUESTSSL-1082936
  243  
high severity Denial of Service (DoS)
npm:ws:20171108
  220  
high severity Prototype Poisoning
SNYK-JS-QS-3153490
  162  
high severity Access Restriction Bypass
SNYK-JS-XMLHTTPREQUESTSSL-1255647
  149  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-8482416
  125  
high severity Regular Expression Denial of Service (ReDoS)
npm:parsejson:20170908
  114  
high severity Denial of Service (DoS)
npm:ws:20160624
  114  
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860
  111  
high severity Insecure Defaults
npm:engine.io-client:20160426
  110  
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867
  105  
medium severity Open Redirect
SNYK-JS-EXPRESS-6474509
  98  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
  89  
low severity Cross-site Scripting
SNYK-JS-SEND-7926862
  79  
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
  79  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
  63  
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
  58  
medium severity Insecure Randomness
npm:ws:20160920
  46  
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
  44  
low severity Regular Expression Denial of Service (ReDoS)
npm:ms:20170412
  40  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)
🦉 Open Redirect
🦉 Regular Expression Denial of Service (ReDoS)
🦉 More lessons are available in Snyk Learn

@erpranavjoshi erpranavjoshi requested a review from a team as a code owner December 9, 2024 16:18
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants