Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade adm-zip from 0.4.11 to 0.5.15 #3

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade adm-zip from 0.4.11 to 0.5.15 #3

wants to merge 1 commit into from

Conversation

Sladey01
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade adm-zip from 0.4.11 to 0.5.15.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 19 versions ahead of your current version.

  • The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 295 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-MIXINDEEP-450212		 295 Proof of Concept
high severity Directory Traversal
SNYK-JS-MOMENT-2440688		 295 No Known Exploit
high severity Prototype Pollution
SNYK-JS-Y18N-1021887		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-Y18N-1021887		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-608086		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-6139239		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-73638		 295 Proof of Concept
high severity Cross-site Scripting (XSS)
npm:marked:20150520		 295 No Known Exploit
high severity Cross-site Scripting (XSS)
npm:marked:20170112		 295 No Known Exploit
high severity Cross-site Scripting (XSS)
npm:marked:20170815		 295 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
npm:marked:20170907		 295 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
npm:marked:20180225		 295 Proof of Concept
high severity Remote Code Execution (RCE)
SNYK-JS-HANDLEBARS-1056767		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-469063		 295 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-HANDLEBARS-480388		 295 No Known Exploit
high severity Arbitrary Code Execution
SNYK-JS-HANDLEBARS-534478		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-173692		 295 No Known Exploit
high severity Prototype Pollution
SNYK-JS-INI-1048974		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-INI-1048974		 295 Proof of Concept
high severity Remote Code Execution (RCE)
SNYK-JS-EJS-2803307		 295 Proof of Concept
high severity Arbitrary Code Execution
npm:ejs:20161128		 295 No Known Exploit
high severity Remote Code Execution (RCE)
SNYK-JS-EJS-2803307		 295 Proof of Concept
high severity Arbitrary Code Execution
npm:ejs:20161128		 295 No Known Exploit
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		 295 No Known Exploit
high severity DLL Injection
SNYK-JS-KERBEROS-568900		 295 Proof of Concept
high severity Code Injection
SNYK-JS-LODASH-1040724		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-450202		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-567746		 295 Proof of Concept
high severity Directory Traversal
SNYK-JS-ADMZIP-1065796		 295 No Known Exploit
high severity Prototype Pollution
SNYK-JS-AJV-584908		 295 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 295 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 295 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 295 Proof of Concept
high severity Code Injection
SNYK-JS-LODASH-1040724		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-450202		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-567746		 295 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-ASYNC-2441827		 295 Proof of Concept
high severity Remote Memory Exposure
SNYK-JS-BL-608877		 295 Proof of Concept
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860		 295 No Known Exploit
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727		 295 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970		 295 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-DICER-2311764		 295 Mature
high severity Prototype Pollution
SNYK-JS-DUSTJSLINKEDIN-1089257		 295 Proof of Concept
high severity Code Injection
npm:dustjs-linkedin:20160819		 295 No Known Exploit
high severity Remote Code Execution (RCE)
SNYK-JS-HANDLEBARS-1056767		 295 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-EXPRESSFILEUPLOAD-473997		 295 No Known Exploit
high severity Prototype Pollution
SNYK-JS-EXPRESSFILEUPLOAD-595969		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-174183		 295 No Known Exploit
high severity Prototype Pollution
SNYK-JS-HANDLEBARS-469063		 295 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-HANDLEBARS-480388		 295 No Known Exploit
high severity Arbitrary Code Execution
SNYK-JS-HANDLEBARS-534478		 295 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-MONGODB-473855		 295 No Known Exploit
high severity Prototype Pollution
SNYK-JS-MONGOOSE-2961688		 295 Proof of Concept
high severity Prototype Poisoning
SNYK-JS-QS-3153490		 295 Proof of Concept
high severity Prototype Override Protection Bypass
npm:qs:20170213		 295 No Known Exploit
medium severity Denial of Service (DoS)
npm:ejs:20161130-1		 295 No Known Exploit
medium severity Cross-site Scripting (XSS)
npm:ejs:20161130		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
npm:semver:20150403		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
npm:moment:20161019		 295 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-YARGSPARSER-560381		 295 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-YARGSPARSER-560381		 295 Proof of Concept
medium severity Cross-site Scripting (XSS)
npm:marked:20170815-1		 295 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-HANDLEBARS-1279029		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HIGHLIGHTJS-1048676		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		 295 Proof of Concept
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		 295 Proof of Concept
medium severity Reverse Tabnabbing
SNYK-JS-ISTANBULREPORTS-2328088		 295 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-JQUERY-174006		 295 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERY-565129		 295 Mature
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERY-567880		 295 Mature
medium severity Arbitrary Code Injection
SNYK-JS-EJS-1049328		 295 Proof of Concept
medium severity Improper Control of Dynamically-Managed Code Resources
SNYK-JS-EJS-6689533		 295 No Known Exploit
medium severity Cross-site Scripting (XSS)
npm:ejs:20161130		 295 No Known Exploit
medium severity Denial of Service (DoS)
npm:ejs:20161130-1		 295 No Known Exploit
medium severity Arbitrary Code Injection
SNYK-JS-EJS-1049328		 295 Proof of Concept
medium severity Improper Control of Dynamically-Managed Code Resources
SNYK-JS-EJS-6689533		 295 No Known Exploit
medium severity Cross-site Scripting (XSS)
npm:jquery:20150627		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-73639		 295 Proof of Concept
medium severity Prototype Pollution
npm:lodash:20180130		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 295 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-HANDLEBARS-567742		 295 Proof of Concept
medium severity Open Redirect
SNYK-JS-EXPRESS-6474509		 295 No Known Exploit
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867		 295 No Known Exploit
medium severity Arbitrary File Upload
SNYK-JS-EXPRESSFILEUPLOAD-2635697		 295 Proof of Concept
medium severity Arbitrary File Upload
SNYK-JS-EXPRESSFILEUPLOAD-2635946		 295 Proof of Concept
critical severity Prototype Pollution
SNYK-JS-HANDLEBARS-534988		 295 No Known Exploit
high severity Prototype Poisoning
SNYK-JS-QS-3153490		 295 Proof of Concept
high severity Prototype Override Protection Bypass
npm:qs:20170213		 295 No Known Exploit
high severity Prototype Poisoning
SNYK-JS-QS-3153490		 295 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-608086		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-6139239		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-73638		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-SETVALUE-1540541		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-SETVALUE-450213		 295 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 295 No Known Exploit
high severity Prototype Pollution
SNYK-JS-UNSETVALUE-2400660		 295 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
npm:fresh:20170908		 295 No Known Exploit
high severity Prototype Pollution
SNYK-JS-SETVALUE-1540541		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-SETVALUE-450213		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-TYPEORM-590152		 295 Mature
high severity Regular Expression Denial of Service (ReDoS)
npm:negotiator:20160616		 295 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
npm:negotiator:20160616		 295 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
npm:negotiator:20160616		 295 No Known Exploit
high severity Uninitialized Memory Exposure
npm:npmconf:20180512		 295 Mature
high severity Prototype Pollution
SNYK-JS-MONGOOSE-5777721		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-MQUERY-1050858		 295 Proof of Concept
high severity Prototype Pollution
SNYK-JS-MQUERY-1089718		 295 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-HANDLEBARS-567742		 295 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-HIGHLIGHTJS-1045326		 295 No Known Exploit
medium severity Information Exposure
SNYK-JS-MONGOOSE-472486		 295 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764		 295 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764		 295 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764		 295 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-MONGOOSE-1086688		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106		 295 Proof of Concept
medium severity Server-side Request Forgery (SSRF)
SNYK-JS-REQUEST-3361831		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-73639		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-174116		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-2342073		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-2342082		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-451540		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-584281		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090600		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602		 295 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-XML2JS-5414874		 295 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-TOUGHCOOKIE-5672873		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251		 295 No Known Exploit
medium severity Arbitrary Code Injection
SNYK-JS-UNDERSCORE-1080984		 295 Proof of Concept
medium severity Denial of Service (DoS)
npm:mem:20180117		 295 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
npm:ms:20151024		 295 No Known Exploit
medium severity Directory Traversal
npm:st:20140206		 295 Proof of Concept
medium severity Open Redirect
npm:st:20171013		 295 Mature
medium severity Remote Memory Exposure
npm:mongoose:20160116		 295 Mature
medium severity Prototype Pollution
SNYK-JS-MPATH-1577289		 295 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 295 Proof of Concept
low severity Validation Bypass
SNYK-JS-KINDOF-537849		 295 Proof of Concept
critical severity Arbitrary File Write via Archive Extraction (Zip Slip)
npm:adm-zip:20180415		 295 Mature
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962463		 295 Proof of Concept
critical severity Prototype Pollution
SNYK-JS-HANDLEBARS-534988		 295 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-HANDLEBARS-1279029		 295 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
npm:moment:20170905		 295 No Known Exploit
low severity Information Exposure
SNYK-JS-HBS-1566555		 295 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		 295 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		 295 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		 295 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		 295 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SEND-7926862		 295 No Known Exploit
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865		 295 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905		 295 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
npm:debug:20170905		 295 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
npm:ms:20170412		 295 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
npm:mime:20170907		 295 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
npm:mime:20170907		 295 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
npm:ms:20170412		 295 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
npm:ms:20170412		 295 No Known Exploit
Release notes
Package name: adm-zip from adm-zip GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"adm-zip","from":"0.4.11","to":"0.5.15"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-SEMVER-3247795","issue_id":"SNYK-JS-SEMVER-3247795","priority_score":482,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-SEMVER-3247795","issue_id":"SNYK-JS-SEMVER-3247795","priority_score":696,...

@snyk-bot
fix: upgrade adm-zip from 0.4.11 to 0.5.15
046261a 
Snyk has created this PR to upgrade adm-zip from 0.4.11 to 0.5.15.

See this package in npm:
adm-zip

See this project in Snyk:
https://app.snyk.io/org/duncan.slade/project/003ef374-3f80-4aa2-a8ff-b345fbfde4d0?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@Sladey01 @snyk-bot