Skip to content

Conversation

@CharaD7
Copy link
Owner

@CharaD7 CharaD7 commented Jun 21, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: docpad The new version differs by 87 commits.
  • 7ed5087 v6.83.0 - major changes and improvements
  • 1863910 Create FUNDING.yml
  • d985079 readme: removed docpad banner
  • 4df24a1 history: updated for docpad.org to docpad.bevry.me
  • f3f675e readme: remove outdated links
  • e7a87b7 readme: updated for docpad.org to docpad.bevry.me
  • 51c2397 history: refresh discuss.bevry.me links for new topic ids
  • 3a8e776 v6.82.5 - fix missing plugin paths not being reported
  • 67b3af6 v6.82.4 - missing action error reporting improvement
  • be26f29 v6.82.3 - bring back node v6 support
  • 41f0dc8 v6.82.2 - improved plugin resolution
  • fc8d8cd v6.82.1 - dep upgrades and fix project init
  • d62e106 v6.82.0 - version bump and changelog
  • 4db3311 cleaned up shutdown process for latest CLI changes
  • f0c2679 dropped legacy node version support
  • 17f3121 split out bin/docpad into bin and lib/cli
  • e74c017 redid creation, config, and CLI for reliability
  • d26fc37 history: noted closure of #1012 on v6.80.7
  • 6cfb88a history: note closure of #1017 on v6.80.7
  • 966f0f4 history: typo
  • 4e9530a history: add note for #1089
  • b28f24a ran boundation again
  • 096efe8 update tests for bin move
  • 5868a79 Added `runBefore` and `runAfter` events as `docpadReady` did not include action as anticipated

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-SEMVER-3247795
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants