[Snyk(Unlimited)] Upgrade cookie-parser from 1.3.3 to 1.4.5

[snyk-bot]

Snyk has created this PR to upgrade cookie-parser from 1.3.3 to 1.4.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released a month ago, on 2020-03-15.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	GPL-2.0 license snyk:lic:npm:goof:GPL-2.0	No Data
	MPL-2.0 license snyk:lic:npm:symbol:MPL-2.0	No Data
	Arbitrary Code Injection SNYK-JS-MORGAN-72579	Proof of Concept

Release notes

Package name: cookie-parser

• 1.4.5 - 2020-03-15
  
  • deps: cookie@0.4.0
• 1.4.4 - 2019-02-13
  
  • perf: normalize secret argument only once
• 1.4.3 - 2016-05-27
  
  • deps: cookie@0.3.1
    • perf: use for loop in parse
• 1.4.2 - 2016-05-21
  
  • deps: cookie@0.2.4
    • perf: enable strict mode
    • perf: use for loop in parse
    • perf: use string concatination for serialization
• 1.4.1 - 2016-01-11
  
  • deps: cookie@0.2.3
  • perf: enable strict mode
• 1.4.0 - 2015-09-18
  

  1.4.0

• 1.3.5 - 2015-05-20
  
  • deps: cookie@0.1.3
    • Slight optimizations
• 1.3.4 - 2015-02-15
  
  • deps: cookie-signature@1.0.6
• 1.3.3 - 2014-09-06
  
  • deps: cookie-signature@1.0.5

from cookie-parser GitHub release notes

Commit messages

Package name: cookie-parser

• 2fea3f1 1.4.5
• 562fe89 tests: add test for single secret in array
• 747f5a1 tests: remove deep-equal dependency
• ff3a789 tests: remove shared server object
• 78003f1 build: Node.js@12.16
• 3dc38b6 build: Node.js@10.19
• ae6ec73 build: remove deprecated Travis CI directives
• 51f99b9 build: speed up logic in Travis CI build steps
• 43dde8f docs: hard wrap lines
• 0ec7045 build: support Node.js 13.x
• 76f6367 build: mocha@7.1.0
• a7fae23 build: eslint-plugin-markdown@1.0.2
• 6c3541c build: eslint-plugin-import@2.20.1
• 29aaf38 deps: cookie@0.4.0
• 9599b48 build: eslint-plugin-node@11.0.0
• 0bc799c build: mocha@7.0.1
• f0b3ea4 build: Node.js@12.14
• e4249cd build: Node.js@10.18
• e2d7b43 build: Node.js@8.17
• dc05375 build: mocha@7.0.0
• f4e024f build: eslint-plugin-markdown@1.0.1
• 81a5599 build: eslint-plugin-import@2.20.0
• 2ad47b7 build: eslint@6.8.0
• e21e407 build: Node.js@12.13

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs