Skip to content

[Snyk] Fix for 34 vulnerabilities#46

Open
snyk-io[bot] wants to merge 1 commit into
mainfrom
snyk-fix-dac146cacb4c80868825c6dc438f5d8d
Open

[Snyk] Fix for 34 vulnerabilities#46
snyk-io[bot] wants to merge 1 commit into
mainfrom
snyk-fix-dac146cacb4c80868825c6dc438f5d8d

Conversation

@snyk-io

@snyk-io snyk-io Bot commented May 22, 2025

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to fix 34 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
critical severity Arbitrary File Write via Archive Extraction (Zip Slip)
npm:adm-zip:20180415
  1000  
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERY-565129
  496  
medium severity Remote Memory Exposure
npm:mongoose:20160116
  297  
high severity Uninitialized Memory Exposure
npm:npmconf:20180512
  286  
high severity Prototype Pollution
SNYK-JS-EXPRESSFILEUPLOAD-595969
  274  
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERY-567880
  273  
medium severity Prototype Pollution
SNYK-JS-JQUERY-174006
  258  
high severity Arbitrary Code Execution
npm:ejs:20161128
  243  
high severity Cross-site Scripting (XSS)
npm:marked:20150520
  238  
medium severity Prototype Pollution
npm:lodash:20180130
  233  
high severity Denial of Service (DoS)
SNYK-JS-DICER-2311764
  221  
high severity Code Injection
npm:dustjs-linkedin:20160819
  201  
high severity Uninitialized Memory Exposure
SNYK-JS-BL-608877
  199  
high severity Denial of Service (DoS)
SNYK-JS-EXPRESSFILEUPLOAD-473997
  192  
medium severity Regular Expression Denial of Service (ReDoS)
npm:moment:20161019
  170  
high severity Prototype Pollution
SNYK-JS-ASYNC-2441827
  160  
medium severity Directory Traversal
npm:st:20140206
  152  
high severity Prototype Pollution
SNYK-JS-INI-1048974
  149  
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764
  137  
medium severity Denial of Service (DoS)
npm:ejs:20161130-1
  136  
medium severity Cross-site Scripting (XSS)
npm:ejs:20161130
  134  
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-469063
  131  
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
  131  
high severity Regular Expression Denial of Service (ReDoS)
npm:negotiator:20160616
  114  
high severity Prototype Override Protection Bypass
npm:qs:20170213
  114  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601
  105  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602
  105  
medium severity Cross-site Scripting (XSS)
npm:jquery:20150627
  93  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599
  84  
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
  57  
low severity Regular Expression Denial of Service (ReDoS)
npm:ms:20170412
  53  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818
  45  
medium severity Regular Expression Denial of Service (ReDoS)
npm:ms:20151024
  45  
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
  44  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Cross-site Scripting (XSS)
🦉 Denial of Service (DoS)
🦉 More lessons are available in Snyk Learn

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:adm-zip:20180415
- https://snyk.io/vuln/SNYK-JS-JQUERY-565129
- https://snyk.io/vuln/npm:mongoose:20160116
- https://snyk.io/vuln/npm:npmconf:20180512
- https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-595969
- https://snyk.io/vuln/SNYK-JS-JQUERY-567880
- https://snyk.io/vuln/SNYK-JS-JQUERY-174006
- https://snyk.io/vuln/npm:ejs:20161128
- https://snyk.io/vuln/npm:marked:20150520
- https://snyk.io/vuln/npm:lodash:20180130
- https://snyk.io/vuln/SNYK-JS-DICER-2311764
- https://snyk.io/vuln/npm:dustjs-linkedin:20160819
- https://snyk.io/vuln/SNYK-JS-BL-608877
- https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-473997
- https://snyk.io/vuln/npm:moment:20161019
- https://snyk.io/vuln/SNYK-JS-ASYNC-2441827
- https://snyk.io/vuln/npm:st:20140206
- https://snyk.io/vuln/SNYK-JS-INI-1048974
- https://snyk.io/vuln/SNYK-JS-MINIMIST-559764
- https://snyk.io/vuln/npm:ejs:20161130-1
- https://snyk.io/vuln/npm:ejs:20161130
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-469063
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
- https://snyk.io/vuln/npm:negotiator:20160616
- https://snyk.io/vuln/npm:qs:20170213
- https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090601
- https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090602
- https://snyk.io/vuln/npm:jquery:20150627
- https://snyk.io/vuln/SNYK-JS-VALIDATOR-1090599
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/npm:ms:20170412
- https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818
- https://snyk.io/vuln/npm:ms:20151024
- https://snyk.io/vuln/SNYK-JS-COOKIE-8163060
@snyk-io

snyk-io Bot commented May 22, 2025

Copy link
Copy Markdown
Author

Snyk checks have failed. 5 issues have been found so far.

Icon Severity Issues
Critical 0
High 5
Medium 0
Low 0

security/snyk check is complete. 5 issues have been found. (View Details)

license/snyk check is complete. No issues have been found. (View Details)

code/snyk check is complete. No issues have been found. (View Details)

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants