Skip to content

Conversation

@GerHobbelt
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 591/1000
Why? Recently disclosed, Has a fix available, CVSS 6.1
Open Redirect
SNYK-JS-EXPRESS-6474509
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: docpad The new version differs by 66 commits.
  • b28f24a ran boundation again
  • 096efe8 update tests for bin move
  • 5868a79 Added `runBefore` and `runAfter` events as `docpadReady` did not include action as anticipated
  • 336321e removed unused dependencies
  • 22842aa note which new deprecations will have warnings
  • 69dfd13 add background reading to v6.81.0 and updated date
  • 8afd24f add missing docpad-plugintester dev dep for b/c
  • 5cb4abb version bump to v6.81.0
  • 6056ab4 move bin/docpad to bin.js
  • 2695db7 fixed mtime logging even though there weren’t any extra models
  • 14633fb Merge branch 'dev-removedeprecations' into `dev-abstractplugins`
  • 0eb313e abstract out plugin and tester classes
  • fa24b8e v6.80.9 - limited docpad.require to testers
  • 87fc6ea v6.80.8 - version bump and changelog
  • 31a1c2c updated base files and editions using boundation
  • c24a1e9 updated caterpillar dependency
  • 5fadbb3 updated deps
  • d4ecd52 make the rendering the extension message more clear
  • fee542a clarify error logging and bubbling functionality
  • 12f0cda tests can now run in parallel
  • 6a75d19 v6.80.7 - error and shutdown robustness
  • 84348f5 v6.80.6 - document matter parsing by docmatter
  • 84775ce v6.80.5 - progress updates now in terminal title
  • 9c1bc87 swapped out progressbar for progress-title

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-EXPRESS-6474509
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants