[Snyk] Fix for 4 vulnerabilities

[rx007]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: anchor

The new version differs by 84 commits.

• f24a4fe 1.4.1
• 609cef2 Update isURL validation and add localhost test (req and res available in views balderdashy/sails#113)
• 2bb793a Update validator@13.7.0 (switching to production balderdashy/sails#112)
• f871463 1.4.0
• 18e0e7f Add original invalid data to the error message for selected rules, in order to reduce the time it takes to debug mistakes
• bfcd549 Minor improvement to test output.
• e42acb7 1.3.0
• 4e519da Nabbed one other one I missed
• 7d77b02 Finish the rest of the TODOs began in d6f82e75d3827ceee6e0000b9e98cc752f461f51
• f05f536 Take care of some of the TODOs from previous commit. Also add an isError check when handling errors thrown from validation rules to prevent potential issues in extreme edge cases (where something weird gets thrown)
• d6f82e7 Add validator upgrade TODOs, and remove old commented out isNotNull thing (it's no longer relevant)
• ea3a236 Added a few more tests.
• 238d362 Reroll isBefore and isAfter the dumb, explicit way.
• f72ef98 Clean up checkConfig for isBefore and isAfter, and clarify another comment.
• 167a02d Tweak checkConfig error msgs for isBefore+isAfter
• ee27777 Add todo for future
• 0e2805c Fix out of date test label
• 55d9fbe Clean up tests so they report more helpful stuff.
• 144d872 Bump validator version re https://snyk.io/test/npm/anchor?severity=high&severity=medium&severity=low#npm:validator:20160218 (without applying any of the necessary changes yet, if there are any). Also upgrade to latest eslintrc file, etc, and bump eslint dep.
• 41dd3e0 1.2.1
• 10c7e86 Fix build status urls
• f6b689b Avoid confusion
• b429872 More of the same
• 63fe204 Trivial

See the full diff

Package name: sails-hook-orm

The new version differs by 250 commits.

• 1e9e6f2 2.0.0
• 58eef54 2.0.0-23
• 0e2134f Update eslintrc, and fix something trivial
• 1db6353 Fix https://github.com/Sails request hangs on sails.getDataStore().transaction(fn) , and fn seems not executed when sails-mysql upgraded to 1.0.0-16 balderdashy/sails#4271
• f2c2fc0 Use `name: 'userError'` instead of sending strings back as error arguments to callbacks.
• 6f33b31 More friendly error for invalid datastore config
• 3df2117 Don't allow model instance methods at all.
• 8b025f1 Update warning msg (now that we're using neDB it needn't come across quite as dire)
• 6e678df 2.0.0-22
• 1b5884d Bump parley dep to improve error messages (not to mention all of the other rich, complicated goodness that comes from the latest release)
• a077af7 Add slightly more accurate suffix to error msg (e.g. to improve the output when attempting to use .transaction() with sails-disk)
• 1facd90 Properly catch unhandled promise rejections and tolerate non-Errors from procedural parameters (to allow for special exit signals and other flow control paradigms). Solves https://trello.com/c/Yv4BGFwr
• df71162 Added sanity check w/ better error msg.
• a1c585d If invalid model definitions are detected, just return an error message _without_ a stack trace.
• e418590 Validate validation rule configuration
• d537073 Turn off archiving for tests
• e21b429 Set default datastore adapter to `sails-disk` (string), and make sure it's loaded last.
• bc48bd1 trivial
• 650eec7 Dont globalize models with the _private flag attached.
• 47d373a trivial
• 8139c26 2.0.0-21
• 91580df Bump Waterline version and set to semver range
• 43c78ed 2.0.0-20
• 5a96e59 Update scripts and update eslint.

See the full diff

Package name: waterline

The new version differs by 250 commits.

• 2c5ec51 0.13.1
• 8156b23 Fixes https://github.com/Decryption doesn't work for records created with Model.findOrCreate method balderdashy/sails#4302#issuecomment-363883885
• 9a32b31 Add note re https://github.com/Decryption doesn't work for records created with Model.findOrCreate method balderdashy/sails#4302#issuecomment-363883885
• 858fe59 Update LICENSE.md
• 0a93d56 Make toJSON overridable to avoid confusing behavior in userland code.
• 47ffea6 update to use `await` and include subtle link to manifesto
• f6313b4 force bump deps to ensure latest anchor
• c2ff1ca Lint fix, and take care of a documentation todo
• 76dab58 Update eslint dep to 4, and update eslintrc.
• e704ffb Force bump to latest parley.
• 86bccd6 0.13.1-9
• 1d0878d Tolerate non-Errors to allow for special exit signals and compatibility with other flow control paradigms.
• 13a64fc Take care of unhandled promise rejections in .stream() iteratees (fixes https://trello.com/c/5JGI0c66)
• 3311327 Enhance error message
• 1d747f6 Fix typos
• 27f472c Same as https://github.com/node-machine/machine/commit/8c4c2d81005959876406510b34bc9df6bcf19f5f
• 7d809e5 Minor tweak to error msg
• 7c71dbe Don't apply `omit` criteria to join tables
• d2cc874 0.13.1-8
• 7aca522 Attempt at doing https://github.com/[patch] Use Node version check to determine whether to process encryption options for each model balderdashy/waterline#1532/files with a slightly smaller change footprint (How to make unit test easier to integrate in a project ? balderdashy/sails#1533)
• fb8a1e4 Tweak previous commit to ensure a good error msg is shown
• 5aa605a Attempt at doing https://github.com/[patch] Use Node version check to determine whether to process encryption options for each model balderdashy/waterline#1532/files with a slightly smaller change footprint
• 52e61bc 0.13.1-7
• 6efcda1 Improve error message about bad pk type, particularly for users of mongo/rethink/etc. (https://trello.com/c/x6VSjZbc)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.