Skip to content

Conversation

@gtwright
Copy link
Contributor

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: serverless The new version differs by 250 commits.
  • 16c29da chore: Release v3.0.0
  • ad1faa3 chore: Bump dependencies
  • c150045 refactor: Rename `…nts/api-gateway/lib/method/requestParameters.test.js`
  • 95e308d refactor: Rename `…s/package/compile/events/alb/lib/healthCheck.test.js`
  • 358a1cf refactor: Rename `lib/plugins/aws/package/compile/events/eventBridge`
  • 88b52ab test: Rename `test/integrationPackage`
  • 3f8b1a1 refactor: Rename `…e/compile/events/api-gateway/lib/hack/updateStage.js`
  • 93d1c29 refactor: Rename `…events/api-gateway/lib/hack/disassociateUsagePlan.js`
  • bb70c63 refactor: Rename `…kage/compile/events/websockets/lib/routeResponses.js`
  • bff4cc7 refactor: Rename `…/events/websockets/lib/pickWebsocketsTemplatePart.js`
  • 20b90cb refactor: Rename `…kage/compile/events/api-gateway/lib/usagePlanKeys.js`
  • 3ea8389 refactor: Rename `…/package/compile/events/api-gateway/lib/usagePlan.js`
  • 04158ea refactor: Rename `…ws/package/compile/events/api-gateway/lib/restApi.js`
  • 897fdfc refactor: Rename `…e/compile/events/api-gateway/lib/requestValidator.js`
  • 44f48f5 refactor: Rename `…ws/package/compile/events/api-gateway/lib/apiKeys.js`
  • cb3518e refactor: Rename `lib/plugins/aws/package/compile/events/apiGateway`
  • 98e454e refactor: Rename `…/aws/package/compile/events/alb/lib/listenerRules.js`
  • 0b542a1 refactor: Rename `…s/aws/package/compile/events/alb/lib/targetGroups.js`
  • 72624b0 refactor: Rename `…lugins/aws/package/compile/events/s3/configSchema.js`
  • 6ee1a79 refactor: Rename `…package/compile/events/msk/getMskClusterNameToken.js`
  • f2a4f96 refactor: Rename `…compile/events/lib/ensureApiGatewayCloudWatchRole.js`
  • 364e52a refactor: Rename `lib/plugins/aws/package/compile/events/httpApi.js`
  • ebe4035 refactor: Rename `…s/aws/package/compile/events/iotFleetProvisioning.js`
  • 04f6318 refactor: Rename `…lugins/aws/package/compile/events/cognitoUserPool.js`

See the full diff

Package name: serverless-offline The new version differs by 250 commits.
  • 462eb87 v10.2.1
  • 877463b refactor: replace jsonwebtoken with jose (#1579)
  • c0b8d75 fix: usage identifier key condition
  • ac45a34 chore: add quotes to log vars
  • 5aa44ae refactor: create lambda only when needed
  • 28b68e8 chore: destructuring order nit
  • c8f22ea v10.2.0
  • b1a6121 refactor: use node:fs/promises
  • 2843e86 refactor: websocket server instantation
  • 4c7a034 refactor: http server instantation for websockets
  • af68056 chore: bump deps
  • 4788e04 refactor: websocket servers instantiation
  • 1a6c2fe chore: await websocket start
  • dda6e57 chore: import order nit
  • 311fc52 feat: secure web sockets (#1468)
  • 0000ba7 refactor: use optional chaining
  • 52b0176 chore: bump deps
  • 59b0309 v10.1.0
  • 97a2c34 chore: rename old npm scripts
  • 6027d46 test: add code coverage
  • e877cef doc: fix option line breaks
  • 546cca1 doc: reformat options
  • b7b8e36 test: remove api keys from builder
  • c6749da chore: quote x-api-key header name

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-SEMVER-3247795
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants