Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #47

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Apr 6, 2022

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Directory Traversal
SNYK-JS-MOMENT-2440688
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: sequelize The new version differs by 250 commits.
  • 511ae27 release(2.0.0)
  • ef15741 Merge pull request #3091 from sequelize/travis-0.12
  • a7d4f88 run node.js 0.12 on travis
  • 81748fe [ci skip] add io.js to readme
  • fa5758c Merge pull request #3090 from sequelize/iojs-travis
  • 745a77f match lowercase p in port
  • a65fb69 remove mssql as allowed failure
  • 7c96f60 remove allow failures for mysql, maria and sqlite
  • 583d0b8 log error message
  • 6652e5b remove io.js coverage (should not be needed)
  • 4e37847 fix auth test expectations
  • 761ed19 remove mariasql dependency
  • 9fe17a9 Merge branch 'enhancement/add-iojs-support-to-travis-yml' of https://github.com/seegno-forks/sequelize into iojs
  • ef5af00 Merge pull request #3087 from sequelize/mariadb-replacement
  • 81750a8 Update event emitter deprecation notice
  • c1e802b skip bad test for now
  • aab0cb3 remove hardcoded connection manager include
  • 14c5a95 remove hard require to query generator (should go through dialect instead)
  • 390e36c use proper inheritance
  • 033e9a4 remove mariadb connector, use mysql instead
  • f5f58ec Merge pull request #3014 from sequelize/refactor-data-types
  • f535c63 implement review changes
  • 07a559c move more logic to data types
  • 2e166e6 Implement dialect specific data types

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MOMENT-2440688
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant