Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #26

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 636/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.3
Prototype Pollution
npm:hoek:20180212
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: hapi The new version differs by 250 commits.
  • c4593b6 deps. Closes #2897. Closes #2898. Closes #2899. Closes #2900. Closes #2901. Closes #2902. Closes #2903. Closes #2904. Closes #2905. Closes #2906. Closes #2907. Closes #2908. Closes #2909. Closes #2910. Closes #2911. Closes #2912. Closes #2913. Closes #2914. Closes #2915. Closes #2916. Closes #2917. Closes #2918. Closes #2919. Closes #2920. Closes #2921. Closes #2922. Closes #2923
  • ca4320e Merge pull request #2891 from nlindley/payload-test-typo
  • 02b6ac7 Fix typo in payload test
  • e5da51c Merge branch 'master' of github.com:hapijs/hapi
  • 5a0dc49 Remove compount assignments
  • 375fe30 Merge pull request #2888 from cjihrig/master
  • 05f6a26 style fixes
  • 635089b Merge pull request #2887 from gergoerdosi/node-5
  • 86102c7 Test on node v5
  • fc503f8 lab 7
  • fdf7ed3 Merge pull request #2885 from gergoerdosi/subtext
  • 0cb9143 Update hapijs/subtext to 2.0.2 from 2.0.1
  • d3a6cf8 typo
  • 47373dd Remove bluebird. Closes #2881
  • 98d3404 Skip most lifecycle on not found and bad path. Closes #2867
  • 7041325 CORS error cases. Closes #2868
  • 1696838 Replace function with arrow. Closes #2877
  • 2aedf38 Merge branch 'master' of github.com:hapijs/hapi
  • ca3ee7e Additional => conversions. For #2877
  • 1ef09e8 Merge pull request #2876 from sfabriece/patch-1
  • a7b3ad7 Initial transition to arrow functions. For #2877
  • 7ec0ae3 Update API.md
  • 32cf03c for style change. Closes #2875
  • 38f90bb Replace var with let. Closes #2874

See the full diff

Package name: joi The new version differs by 250 commits.
  • cd05beb 7.0.0
  • 567f56f Fix toc generation
  • 341178b Upgrade isemail to 2.0.0
  • ca6d3c3 Merge pull request #756 from hapijs/es6
  • 9b2c780 es6. Closes #754. Closes 755
  • 44e8bb4 6.10.0
  • 19055f6 Add node 5 to travis
  • 8f421cb Ensure ValidationError as error name (fixes #753)
  • 2ffd216 Merge pull request #747 from mgartner/remove-leading-dot-from-path
  • a48c4fc removes leading "." from path at root object level
  • cd466d5 Explicit paths on cast errors whenever possible.
  • 9820bee 6.9.1
  • 5b00ebc Describe ordered arrays (fixes #745)
  • 1e87865 Merge pull request #737 from kgraves/master
  • 1bf75b7 fixes all issues opened on my last commit
  • 7a39de9 makes allow/valid/invalid not accept undefined #734
  • de00c8a 6.9.0
  • c797d70 Merge pull request #688 from ck-lee/master
  • 765a24b Add ordered API method for array to match items against input in order. closes #659
  • 6bb5c72 6.8.1
  • ae4aafa Merge pull request #730 from hapijs/funcObj
  • cb99f6b Note length change on func
  • c490a8b Fix func validated prototype. Closes #730
  • db599e7 Fix function properties validation. Closes #729

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:hoek:20180212
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant