Skip to content

Conversation

@CharaD7
Copy link
Owner

@CharaD7 CharaD7 commented Jan 10, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 461/1000
Why? Recently disclosed, Has a fix available, CVSS 3.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-DEBUG-3227433
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: docpad The new version differs by 76 commits.
  • fc8d8cd v6.82.1 - dep upgrades and fix project init
  • d62e106 v6.82.0 - version bump and changelog
  • 4db3311 cleaned up shutdown process for latest CLI changes
  • f0c2679 dropped legacy node version support
  • 17f3121 split out bin/docpad into bin and lib/cli
  • e74c017 redid creation, config, and CLI for reliability
  • d26fc37 history: noted closure of #1012 on v6.80.7
  • 6cfb88a history: note closure of #1017 on v6.80.7
  • 966f0f4 history: typo
  • 4e9530a history: add note for #1089
  • b28f24a ran boundation again
  • 096efe8 update tests for bin move
  • 5868a79 Added `runBefore` and `runAfter` events as `docpadReady` did not include action as anticipated
  • 336321e removed unused dependencies
  • 22842aa note which new deprecations will have warnings
  • 69dfd13 add background reading to v6.81.0 and updated date
  • 8afd24f add missing docpad-plugintester dev dep for b/c
  • 5cb4abb version bump to v6.81.0
  • 6056ab4 move bin/docpad to bin.js
  • 2695db7 fixed mtime logging even though there weren’t any extra models
  • 14633fb Merge branch 'dev-removedeprecations' into `dev-abstractplugins`
  • 0eb313e abstract out plugin and tester classes
  • fa24b8e v6.80.9 - limited docpad.require to testers
  • 87fc6ea v6.80.8 - version bump and changelog

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-DEBUG-3227433
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants