Skip to content

[Snyk] Fix for 63 vulnerabilities - #330

Open
papicella wants to merge 1 commit into
masterfrom
snyk-fix-ed298f2ceec81f20d59c32eae5110e09
Open

[Snyk] Fix for 63 vulnerabilities#330
papicella wants to merge 1 commit into
masterfrom
snyk-fix-ed298f2ceec81f20d59c32eae5110e09

Conversation

@papicella

@papicella papicella commented Apr 1, 2026

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 63 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Improper Neutralization of Special Elements in Data Query Logic
SNYK-JS-MONGOOSE-8623536		   659  
high severity Remote Code Execution (RCE)
SNYK-JS-EJS-2803307		   621  
high severity Prototype Pollution
SNYK-JS-TYPEORM-590152		   528  
high severity Code Injection
SNYK-JS-LODASH-1040724		   397  
high severity Prototype Pollution
SNYK-JS-MONGOOSE-5777721		   397  
high severity Improper Neutralization of Special Elements in Data Query Logic
SNYK-JS-MONGOOSE-8446504		   377  
high severity Prototype Pollution
SNYK-JS-DUSTJSLINKEDIN-1089257		   348  
high severity Prototype Pollution
SNYK-JS-MONGOOSE-2961688		   326  
high severity Prototype Pollution
SNYK-JS-LODASH-567746		   320  
high severity Uninitialized Memory Exposure
npm:npmconf:20180512		   286  
high severity Incomplete Filtering of One or More Instances of Special Elements
SNYK-JS-VALIDATOR-13653476		   281  
high severity Prototype Pollution
SNYK-JS-EXPRESSFILEUPLOAD-595969		   274  
high severity Prototype Pollution
SNYK-JS-LODASH-6139239		   267  
high severity Regular Expression Denial of Service (ReDoS)
npm:marked:20180225		   266  
high severity Prototype Pollution
SNYK-JS-LODASH-450202		   256  
high severity Prototype Pollution
SNYK-JS-LODASH-608086		   250  
high severity Prototype Pollution
SNYK-JS-LODASH-73638		   249  
high severity Directory Traversal
SNYK-JS-ADMZIP-1065796		   244  
high severity Arbitrary Code Execution
npm:ejs:20161128		   242  
high severity Cross-site Scripting (XSS)
npm:marked:20150520		   238  
high severity Denial of Service (DoS)
SNYK-JS-DICER-2311764		   222  
high severity Arbitrary Code Execution
SNYK-JS-HANDLEBARS-534478		   214  
high severity DLL Injection
SNYK-JS-KERBEROS-568900		   212  
high severity Code Injection
npm:dustjs-linkedin:20160819		   201  
high severity Directory Traversal
SNYK-JS-MOMENT-2440688		   195  
high severity Remote Code Execution (RCE)
SNYK-JS-HANDLEBARS-1056767		   194  
high severity Denial of Service (DoS)
SNYK-JS-EXPRESSFILEUPLOAD-473997		   192  
high severity Cross-site Scripting (XSS)
npm:marked:20170815		   192  
high severity Cross-site Scripting (XSS)
npm:marked:20170112		   190  
high severity Regular Expression Denial of Service (ReDoS)
npm:marked:20170907		   190  
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860		   171  
high severity Improper Check for Unusual or Exceptional Conditions
SNYK-JS-HANDLEBARS-15807042		   169  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-15309438		   169  
high severity Inefficient Algorithmic Complexity
SNYK-JS-MINIMATCH-15353389		   169  
high severity Allocation of Resources Without Limits or Throttling
SNYK-JS-QS-14724253		   169  
high severity Prototype Pollution
SNYK-JS-AJV-584908		   165  
high severity Improper Encoding or Escaping of Output
SNYK-JS-HANDLEBARS-15807040		   165  
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970		   160  
high severity Prototype Pollution
SNYK-JS-MQUERY-1089718		   160  
high severity Prototype Poisoning
SNYK-JS-QS-3153490		   160  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		   160  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		   159  
high severity Excessive Platform Resource Consumption within a Loop
SNYK-JS-BRACES-6838727		   159  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230		   159  
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-AJV-15274295		   155  
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		   151  
high severity Prototype Pollution
SNYK-JS-MIXINDEEP-450212		   151  
high severity Prototype Pollution
SNYK-JS-SETVALUE-450213		   150  
high severity Prototype Pollution
SNYK-JS-Y18N-1021887		   150  
high severity Prototype Pollution
SNYK-JS-INI-1048974		   149  
high severity Prototype Pollution
SNYK-JS-MQUERY-1050858		   149  
high severity Prototype Pollution
SNYK-JS-SETVALUE-1540541		   149  
medium severity Prototype Pollution
SNYK-JS-LODASH-15053838		   144  
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-469063		   132  
high severity Denial of Service (DoS)
SNYK-JS-MONGODB-473855		   115  
high severity Prototype Pollution
SNYK-JS-UNSETVALUE-2400660		   115  
high severity Prototype Override Protection Bypass
npm:qs:20170213		   115  
high severity Denial of Service (DoS)
SNYK-JS-HANDLEBARS-480388		   114  
high severity Regular Expression Denial of Service (ReDoS)
npm:fresh:20170908		   114  
high severity Regular Expression Denial of Service (ReDoS)
npm:negotiator:20160616		   114  
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-173692		   108  
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-174183		   108  
high severity Infinite loop
SNYK-JS-BRACEEXPANSION-15789759		   97  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 More lessons are available in Snyk Learn

@snyk-bot
fix: package.json & package-lock.json to reduce vulnerabilities
2599e31 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MONGOOSE-8623536
- https://snyk.io/vuln/SNYK-JS-EJS-2803307
- https://snyk.io/vuln/SNYK-JS-TYPEORM-590152
- https://snyk.io/vuln/SNYK-JS-LODASH-1040724
- https://snyk.io/vuln/SNYK-JS-MONGOOSE-5777721
- https://snyk.io/vuln/SNYK-JS-MONGOOSE-8446504
- https://snyk.io/vuln/SNYK-JS-DUSTJSLINKEDIN-1089257
- https://snyk.io/vuln/SNYK-JS-MONGOOSE-2961688
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
- https://snyk.io/vuln/npm:npmconf:20180512
- https://snyk.io/vuln/SNYK-JS-VALIDATOR-13653476
- https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-595969
- https://snyk.io/vuln/SNYK-JS-LODASH-6139239
- https://snyk.io/vuln/npm:marked:20180225
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
- https://snyk.io/vuln/SNYK-JS-LODASH-608086
- https://snyk.io/vuln/SNYK-JS-LODASH-73638
- https://snyk.io/vuln/SNYK-JS-ADMZIP-1065796
- https://snyk.io/vuln/npm:ejs:20161128
- https://snyk.io/vuln/npm:marked:20150520
- https://snyk.io/vuln/SNYK-JS-DICER-2311764
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478
- https://snyk.io/vuln/SNYK-JS-KERBEROS-568900
- https://snyk.io/vuln/npm:dustjs-linkedin:20160819
- https://snyk.io/vuln/SNYK-JS-MOMENT-2440688
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767
- https://snyk.io/vuln/SNYK-JS-EXPRESSFILEUPLOAD-473997
- https://snyk.io/vuln/npm:marked:20170815
- https://snyk.io/vuln/npm:marked:20170112
- https://snyk.io/vuln/npm:marked:20170907
- https://snyk.io/vuln/SNYK-JS-BODYPARSER-7926860
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-15807042
- https://snyk.io/vuln/SNYK-JS-MINIMATCH-15309438
- https://snyk.io/vuln/SNYK-JS-MINIMATCH-15353389
- https://snyk.io/vuln/SNYK-JS-QS-14724253
- https://snyk.io/vuln/SNYK-JS-AJV-584908
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-15807040
- https://snyk.io/vuln/SNYK-JS-DECODEURICOMPONENT-3149970
- https://snyk.io/vuln/SNYK-JS-MQUERY-1089718
- https://snyk.io/vuln/SNYK-JS-QS-3153490
- https://snyk.io/vuln/SNYK-JS-SEMVER-3247795
- https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
- https://snyk.io/vuln/SNYK-JS-BRACES-6838727
- https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
- https://snyk.io/vuln/SNYK-JS-AJV-15274295
- https://snyk.io/vuln/SNYK-JS-JSONSCHEMA-1920922
- https://snyk.io/vuln/SNYK-JS-MIXINDEEP-450212
- https://snyk.io/vuln/SNYK-JS-SETVALUE-450213
- https://snyk.io/vuln/SNYK-JS-Y18N-1021887
- https://snyk.io/vuln/SNYK-JS-INI-1048974
- https://snyk.io/vuln/SNYK-JS-MQUERY-1050858
- https://snyk.io/vuln/SNYK-JS-SETVALUE-1540541
- https://snyk.io/vuln/SNYK-JS-LODASH-15053838
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-469063
- https://snyk.io/vuln/SNYK-JS-MONGODB-473855
- https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660
- https://snyk.io/vuln/npm:qs:20170213
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-480388
- https://snyk.io/vuln/npm:fresh:20170908
- https://snyk.io/vuln/npm:negotiator:20160616
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-173692
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-174183
- https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-15789759
@papicella

papicella commented Apr 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner Author

⛔ Snyk checks have failed. 5 issues have been found so far.

Status Scan Engine Critical High Medium Low Total (5)
⛔ Open Source Security 0 5 0 0 5 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@papicella

papicella commented Apr 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner Author

⛔ Snyk checks have failed. 4 issues have been found so far.

Status Scan Engine Critical High Medium Low Total (4)
⛔ Open Source Security 0 4 0 0 4 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@papicella @snyk-bot