[Snyk] Fix for 18 vulnerabilities #63

Omrisnyk · 2024-09-05T22:54:57Z

Snyk has created this PR to fix 18 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

backend/package.json
backend/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Prototype Pollution SNYK-JS-LODASH-450202	253
	Prototype Pollution SNYK-JS-LODASH-608086	250
	Prototype Pollution SNYK-JS-LODASHMERGE-173732	248
	Code Injection SNYK-JS-LODASH-1040724	239
	Prototype Pollution SNYK-JS-LODASHMERGE-173733	233
	Prototype Pollution SNYK-JS-LODASH-567746	189
	Prototype Pollution SNYK-JS-LODASH-6139239	170
	Prototype Poisoning SNYK-JS-QS-3153490	162
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	159
	Prototype Pollution SNYK-JS-SETVALUE-1540541	158
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	150
	Prototype Pollution SNYK-JS-MIXINDEEP-450212	150
	Prototype Pollution SNYK-JS-SETVALUE-450213	150
	Prototype Pollution SNYK-JS-LODASHMERGEWITH-174136	149
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	63
	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	63
	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	63
	Validation Bypass SNYK-JS-KINDOF-537849	57

Release notes

Package name: @sendgrid/mail

7.0.0 - 2020-04-01
6.5.5 - 2020-03-18
6.5.4 - 2020-03-04
6.5.3 - 2020-02-20
6.5.2 - 2020-02-05
6.5.1 - 2020-01-24
6.5.0 - 2020-01-15
6.4.0 - 2019-05-06
6.3.1 - 2018-06-14

from @sendgrid/mail GitHub release notes

Package name: globby

10.0.0 - 2019-06-29
Breaking:
- Upgrade fast-glob package to v3 (#126) 3706920
  Important: Read the fast-glob release notes! There are many breaking changes.
- Require Node.js 8 9f781ce
- Remove **/bower_components/** as a default ignore pattern 2dd76d2
Enhancements:
- Add globby.stream() (#113) 8aadde8
Fixes:
- Fix using the gitignore and stats options together (#121) 33ca01c
v9.2.0...v10.0.0
9.2.0 - 2019-04-01
- Refactor TypeScript definition to CommonJS compatible export (#115) dc0a49c
v9.1.0...v9.2.0

from globby GitHub release notes

Package name: jsonwebtoken

9.0.2 - 2023-08-30
Release 9.0.2 (#935)
9.0.1 - 2023-07-05
Updating package version to 9.0.1 (#920)
9.0.0 - 2022-12-21
- Check if node version supports asymmetricKeyDetails
- Validate algorithms for ec key type
- Rename variable
- Rename function
- Add early return for symmetric keys
- Validate algorithm for RSA key type
- Validate algorithm for RSA-PSS key type
- Check key types for EdDSA algorithm
- Rename function
- Move validateKey function to module
- Convert arrow to function notation
- Validate key in verify function
- Simplify if
- Convert if to switch..case
- Guard against empty key in validation
- Remove empty line
- Add lib to check modulus length
- Add modulus length checks
- Validate mgf1HashAlgorithm and saltLength
- Check node version before using key details API
- Use built-in modulus length getter
- Fix Node version validations
- Remove duplicate validateKey
- Add periods to error messages
- Fix validation in verify function
- Make asymmetric key validation the latest validation step
- Change key curve validation
- Remove support for ES256K
- Fix old test that was using wrong key types to sign tokens
- Enable RSA-PSS for old Node versions
- Add specific RSA-PSS validations on Node 16 LTS+
- Improve error message
- Simplify key validation code
- Fix typo
- Improve error message
- Change var to const in test
- Change const to let to avoid reassigning problem
- Improve error message
- Test incorrect private key type
- Rename invalid to unsupported
- Test verifying of jwt token with unsupported key
- Test invalid private key type
- Change order of object parameters
- Move validation test to separate file
- Move all validation tests to separate file
- Add prime256v1 ec key
- Remove modulus length check
- WIP: Add EC key validation tests
- Fix node version checks
- Fix error message check on test
- Add successful tests for EC curve check
- Remove only from describe
- Remove only
- Remove duplicate block of code
- Move variable to a different scope and make it const
- Convert allowed curves to object for faster lookup
- Rename variable
- Change variable assignment order
- Remove unused object properties
- Test RSA-PSS happy path and wrong length
- Add missing tests
- Pass validation if no algorithm has been provided
- Test validation of invalid salt length
- Test error when signing token with invalid key
- Change var to const/let in verify tests
- Test verifying token with invalid key
- Improve test error messages
- Add parameter to skip private key validation
- Replace DSA key with a 4096 bit long key
- Test allowInvalidPrivateKeys in key signing
- Improve test message
- Rename variable
- Add key validation flag tests
- Fix variable name in Readme
- Change private to public dsa key in verify
- Rename flag
- Run EC validation tests conditionally
- Fix tests in old node versions
- Ignore block of code from test coverage
- Separate EC validations tests into two different ones
- Add comment
- Wrap switch in if instead of having an early return
- Remove unsupported algorithms from asymmetric key validation
- Rename option to allowInvalidAsymmetricKeyTypes and improve Readme
- 9.0.0
- adding migration notes to readme
- adding changelog for version 9.0.0
Co-authored-by: julienwoll julien.wollscheid@auth0.com
8.5.1 - 2019-03-18
8.5.1

from jsonwebtoken GitHub release notes

Package name: node-cache

5.0.0 - 2019-10-23
- Remove lodash dependency
- DROP CALLBACK SUPPORT - Read the migration guide if you are currently using the callback based api! ⚠️
- add .has(key) and method - Thanks to Regev Brody for PR [#132]!
- add .mset([{key,val,ttl}]) method - Thanks to Sujesh Thekkepatt for PR [#142]!
- add maxKeys setting to limit cache size - Thanks do @ daluf for PR [#141]!
- Also, thank you to all other contributors that remain unnamed here! 🎉
MIGRATION GUIDE 🚧

We have dropped callback support in node-cache and you should migrate to our sync-style api!

If you cannot refactor right now, you can turn on legacy callback support by enabling the enableLegacyCallbacks option. Eg: const cache = new NodeCache({ enableLegacyCallbacks: true })

But we strongly recommend to refactor your code to use the sync-api because we will drop official callback support in Versions v6.x and onwards.

If your code currently looks like this:

cache.get("my-key", function(err, value) {
if (err) {
// ...
}

// double equal checks for null and undefined
if (value != null) {
// hmm.... nothing here :(
}

// do something with value
});

it should be rewritten to:

const value = cache.get("my-key");

// double equal checks for null and undefined
if (value != null) {
// hmm.... nothing here :(
}

// do something with value

5.0.0-alpha.1 - 2019-10-18
5.0.0-alpha.1

5.0.0-alpha.0 - 2019-09-18

4.2.1 - 2019-07-24
…d security vulnerability

4.2.0 - 2018-03-21
- Add options.promiseValueSize for promise value. Thanks to Ryan Roemer for the pull [#84]
- Added option deleteOnExpire
- Added DefinitelyTyped Typescript definitions. Thanks to Ulf Seltmann for the pulls [#90] and [#92]
- Thanks to Daniel Jin for the readme fix in pull [#93]
- Optimized test and ci configs.

from node-cache GitHub release notes

Package name: sanitize-html

2.5.3 - 2021-11-02
2.5.2 - 2021-10-13
2.5.1 - 2021-09-14
2.5.0 - 2021-09-08
2.4.0 - 2021-05-20
2.3.3 - 2021-03-19
2.3.2 - 2021-01-26
2.3.1 - 2021-01-22
2.3.0 - 2020-12-16
2.2.0 - 2020-12-02
2.1.2 - 2020-11-04
2.1.1 - 2020-10-21
2.1.0 - 2020-10-07
2.0.0 - 2020-09-23
2.0.0-rc.2 - 2020-09-09
2.0.0-rc.1 - 2020-08-26
2.0.0-beta.2 - 2020-08-12
2.0.0-beta - 2020-07-29
1.27.5 - 2020-09-23
1.27.4 - 2020-08-26
1.27.3 - 2020-08-12
1.27.2 - 2020-07-29
1.27.1 - 2020-07-15
1.27.0 - 2020-06-17
1.26.0 - 2020-06-03
1.25.0 - 2020-05-29
1.24.0 - 2020-05-20
1.23.0 - 2020-04-09
1.22.1 - 2020-03-12
1.22.0 - 2020-02-23
1.21.1 - 2020-01-17
1.21.0 - 2020-01-17
1.20.1 - 2019-04-25
1.20.0 - 2018-12-17

from sanitize-html GitHub release notes

Package name: truncate-html

1.1.0 - 2024-03-02
There are several changes:
1. no vulnerabilities
2. cheerio can now handle CJK characters correctly
3. if you are using custom cheerio instance with this library, you should set the third parameter of cheerio.load to false to get rid of extra wrappers, see load for details.
4. better support for typescript
1.0.5-beta.2 - 2023-06-17
v1.0.5-beta.2
1.0.5-beta.1 - 2023-06-17
v1.0.5-beta.1
1.0.4 - 2021-07-09
fix: fix type define issues, fixs #32
1.0.3 - 2019-08-14
v1.0.3
1.0.2 - 2019-04-13
update readme.md

from truncate-html GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Validation Bypass
🦉 Regular Expression Denial of Service (ReDoS)
🦉 More lessons are available in Snyk Learn

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"@sendgrid/mail","from":"6.3.1","to":"7.0.0"},{"name":"globby","from":"9.2.0","to":"10.0.0"},{"name":"jsonwebtoken","from":"8.5.1","to":"9.0.2"},{"name":"node-cache","from":"4.2.0","to":"5.0.0"},{"name":"sanitize-html","from":"1.20.0","to":"2.5.3"},{"name":"truncate-html","from":"1.0.2","to":"1.1.0"}],"env":"prod","issuesToFix":[{"exploit_maturity":"No Known Exploit","id":"SNYK-JS-JSONSCHEMA-1920922","priority_score":150,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"low"},{"name":"availability","value":"high"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"low"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00515},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Nov 14 2021 16:49:43 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"high"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":7.84},{"name":"likelihood","value":1.9},{"name":"scoreVersion","value":"V5"}],"severity":"high","title":"Prototype Pollution"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"proofOfConcept"},{"name":"userInteraction","value":"none"},{"name":"privilegesRequired","value":"none"},{"name":"attackComplexity","value":"high"},{"name":"attackVector","value":"network"},{"name":"epss","value":0.00091},{"name":"isTrending","value":false},{"name":"publicationDate","value":"Sun Jan 19 2020 14:31:13 GMT+0000 (Coordinated Universal Time)"},{"name":"isReachable","value":false},{"name":"isTransitive","value":true},{"name":"isMalicious","value":false},{"name":"businessCriticality","value":"high"},{"name":"relativeImportance","value":"low"},{"name":"relativePopularityRank","value":99},{"name":"impact","value":2.35},{"name":"likelihood","value":2.42},{"name":"scoreVersion","value":"V5"}],"severity":"low","title":"Validation Bypass"},{"exploit_maturity":"Proof of Concept","id":"SNYK-JS-KINDOF-537849","priority_score":57,"priority_score_factors":[{"name":"confidentiality","value":"low"},{"name":"integrity","value":"none"},{"name":"availability","value":"none"},{"name":"scope","value":"unchanged"},{"name":"exploitCodeMaturity","value":"pro...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Fix for 18 vulnerabilities #63

[Snyk] Fix for 18 vulnerabilities #63

Omrisnyk commented Sep 5, 2024

MIGRATION GUIDE 🚧

[Snyk] Fix for 18 vulnerabilities #63

Are you sure you want to change the base?

[Snyk] Fix for 18 vulnerabilities #63

Conversation

Omrisnyk commented Sep 5, 2024

Snyk has created this PR to fix 18 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

MIGRATION GUIDE 🚧