Skip to content
This repository has been archived by the owner on Aug 19, 2021. It is now read-only.

[Snyk] Fix for 1 vulnerabilities #32

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-LODASH-567746
Yes Proof of Concept
Commit messages
Package name: grunt-sync The new version differs by 1 commits.

See the full diff

Package name: include-all The new version differs by 12 commits.
  • b74f353 3.0.0
  • 6c877b0 Merge pull request Travis聽#19 from balderdashy/use-sailshq-lodash
  • 80834c3 Replace "lodash" with "sailshq/lodash"
  • 4c34bd3 Merge pull request travis聽#18 from balderdashy/use-merge-dictionary-module
  • d2f8bb7 Merge branch 'master' into use-merge-dictionary-module
  • ffc1185 Fix nesting test to work on Windows
  • ff0a21d Added test for merging arrays, and reorganized tests into "edge cases" suite
  • 5f5f423 Add some comments just to remind ourselves what this test is doing.
  • 4369f5e Use the `merge-dictionaries` module to safely merge modules in `.aggregate()`
  • 4a40680 Update README.md
  • d21d8c4 2.0.0
  • 3314bc1 Don't clear ".node" files when deep-cleaning the cache

See the full diff

Package name: machinepack-gravatar The new version differs by 13 commits.
  • 7f6537b 2.0.0
  • 88c6d48 Bump machine runner dep version.
  • de3e660 Use machine v13
  • b29071b Remove trailing whitespace from defaultImage extended description
  • 7b2b2af Merge pull request Wrong timezone when logging temperatures聽#1 from irlnathan/default-gravatars
  • 349610c Fix tests, and add a couple of new tests.
  • 7eaee33 Clarify that special keywords may be used with the default image input. While in there, also add additional documentation and esp. moreInfoUrls.
  • 87484df Fix sideEffects
  • 0929081 Wrap call to `exits.error()` in `new Error()`
  • b1c82e3 Update .travis.yml
  • 560508f Updated metadata and comments
  • 9002d08 Remove `encodingFailed` exit.
  • 9c6ca15 Update to validate against current machine spec

See the full diff

Package name: sails The new version differs by 250 commits.
  • 6e73a65 1.0.0
  • 5f1d8b3 1.0.0-49
  • 616e4e1 Insist on the latest sails-generate.
  • 6ab0a5a 1.0.0-48
  • 1e28823 Lifting with --redis now sets @sailshq/connect-redis and @sailshq/socket.io-redis.
  • 9f29a03 Change approach from what was begun in 520a3c8cac5db1d9698c50efff82e476ec64fca8 so that we maintain the correct package name for the purpose of require().
  • 520a3c8 Tolerate '@sailshq/connect-redis' as session adapter.
  • e2813f5 1.0.0-47
  • 6768743 Tweak warning message.
  • ce95c84 Update comments to reflect that req.setLocale() is fully supported as of Sails v1.0 and beyond.
  • 0753a99 Trivial
  • 3bdd786 Tweak troubleshooting tips.
  • e8f9bee Check dev-dependencies for sails-hook-grunt
  • e8493a6 1.0.0-46
  • d1b6061 run tests on Node 9
  • b3afed7 Fix issue with CSRF black/whitelists and routes containing optional params when the requested URL contains a querystring but NOT the optional param (whew!)
  • 663527f Fix test error output
  • 69ead96 Revert 35ae3ccba472bf4a8edb8ffd7d579d18391d1ba0 in favor of clarifying some of the wording.
  • 35ae3cc Experiment with customizable www path
  • a89d7a4 extrapolate www path
  • a2a0789 Tolerate sails-hook-grunt specified in devDependencies when running sails www
  • 0b42c59 Don't attempt to create a Redis connection if "client" is provided.
  • 1700788 Update LICENSE.md
  • 9c532dc Merge pull request #4267 from luislobo/patch-3

See the full diff

Package name: sails-disk The new version differs by 85 commits.
  • 15faa44 1.0.0
  • a2b7ee6 1.0.0-12
  • 9d7118c Only set footprint keys for uniqueness violations.
  • a2c2261 Add some assertions.
  • a222824 Update gitignore and scripts
  • 3b3c334 1.0.0-11
  • cef95b4 Support updating the primary key value, as long as it's not using _id as the column.
  • aad2a15 Set _id column to value of primary key when creating records.
  • 333e2d1 1.0.0-10
  • c8a26c5 Add shim to replicate MongoDB's behavior w/ `{ $ne: null }` and empty arrays.
  • bf92cb8 1.0.0-9
  • af97943 Workaround issue with projections including only `_id`
  • b5b985b Relax restrictions on using `_id` column in sails disk.
  • f4adfd7 Add an entry in the `refCols` dictionary for every model, so we don't have to short-circuit checks for it later
  • b494fd9 In `find`, deserialize Buffer objects into `ref` attributes where possible.
  • 7aaaaa4 Merge pull request #58 from balderdashy/expose-lib
  • 70ead96 (whoops) Add back 0.10 and 0.12 in appveyor.yml
  • beabe7a Merge pull request #57 from balderdashy/expose-lib
  • 9c80187 1.0.0-8
  • f7a349d Actually, don't expose the static lib. (No reason to do so, and better to not introduce something experimental if there's any chance it could make an app dependent on random stuff in a dev-only adapter)
  • 2d4d97e 1.0.0-7
  • f2dd761 Rename afterwards function to avoid perceived scope conflict (whether or not it'd ever actually be a big deal, this avoids any potential future scope issues from refactoring, etc).
  • 4051e5e 1.0.0-6
  • 250c32e Handle stray error (and a couple of other trivial changes just from when I was reading through the code)

See the full diff

Package name: sails-mysql The new version differs by 202 commits.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant