Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 2 vulnerabilities #1021

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 2 vulnerabilities #1021

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • integrations/nielsen-dcr/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 490/1000
Why? Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-RAMDA-1582370		 Yes No Known Exploit
high severity 748/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.1		 Improper Privilege Management
SNYK-JS-SHELLJS-2332187		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: eslint The new version differs by 250 commits.
  • c61194f 4.0.0
  • 821a1e6 Build: changelog update for 4.0.0
  • 4aefb49 Chore: avoid using deprecated rules on ESLint codebase (#8708)
  • 389feba Chore: upgrade deps. (#8684)
  • 3da7b5e Fix: Semi-Style only check for comments when tokens exist (fixes #8696) (#8697)
  • 3cfe9ee Fix: Add space between async and param on fix (fixes #8682) (#8693)
  • c702858 Chore: enable no-multiple-empty-lines on ESLint codebase (#8694)
  • 34c4020 Update: Add support for parens on left side for-loops (fixes: #8393) (#8679)
  • 735cd09 Docs: Correct the comment in an example for `no-mixed-requires` (#8686)
  • 026f048 Chore: remove dead code from prefer-const (#8683)
  • a8e1c1c 4.0.0-rc.0
  • 1768dc0 Build: changelog update for 4.0.0-rc.0
  • 0058b0f Update: add --fix to no-debugger (#8660)
  • b4daa22 Docs: Note to --fix option for strict rule (#8680)
  • 4df33e7 Chore: check for root:true in project sooner (fixes #8561) (#8638)
  • c9b980c Build: Add Node 8 on travis (#8669)
  • 9524833 Fix: Don't check object destructing in integer property (fixes #8654) (#8657)
  • c4ac969 Update: fix parenthesized ternary expression indentation (fixes #8637) (#8649)
  • 4f2f9fc Build: update license checker to allow LGPL (fixes #8647) (#8652)
  • b0c83bd Docs: suggest pushing new commits to a PR instead of amending (#8632)
  • d0e9fd2 Fix: Config merge to correctly account for extends (fixes #8193) (#8636)
  • 705d88f Docs: Update CLA link on Pull Requests page (#8642)
  • 794d4d6 Docs: missing paren on readme (#8640)
  • 7ebd9d6 New: array-element-newline rule (fixes #6075) (#8375)

See the full diff

Package name: eslint-plugin-mocha The new version differs by 250 commits.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@snyk-bot