Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 1 vulnerabilities #22

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 1 vulnerabilities #22

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Apr 8, 2022

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • examples/delegated-routing/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Prototype Pollution
SNYK-JS-ASYNC-2441827		 No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: ipfs The new version differs by 250 commits.
  • 99053f7 chore: publish
  • de5e701 chore: update contributors
  • 71e5f53 chore: fix flaky test (#3680)
  • efd147a chore: rename import types (#3678)
  • bb8f8bc fix: only accept cid for ipfs.dag.get (#3675)
  • 0b2d98c fix: reject requests when cors origin list is empty (#3674)
  • 46618c7 fix: loosen input type for swarm.connect and swarm.disconnect (#3673)
  • 5eb32a7 docs: add missing repo API docs link (#3672)
  • 9029ee5 fix: update ipfs repo (#3671)
  • eccb067 chore: remove sidetree test (#3670)
  • f98af8e fix: mark ipld options as partial (#3669)
  • 9bc2d7c docs: fix example for pin remote service add (#3636)
  • 64cc1e1 fix: add missing type import (#3664)
  • 0fe8892 fix: fix types (#3662)
  • 61d0981 fix: only use public api in http api server (#3660)
  • 06bd4f3 chore: update libp2p 0.31.2 (#3659)
  • 0ddbb1b fix: update types after feedback from ceramic (#3657)
  • 7e61fbf chore: fix docker images (#3654)
  • 084589c fix: ignore the ts error caused by the recent protobufjs type change (#3656)
  • 28ad9ad feat: support identity hash in block.get + dag.get (#3616)
  • 9e5afd6 chore: update libp2p to final release version (#3652)
  • 93e7dc4 chore: fix docker images (#3651)
  • 3d68a44 docs: fix typo in readme (#3635)
  • d46559d chore: update ipld-dag-cbor (#3642)

See the full diff

Package name: libp2p-delegated-content-routing The new version differs by 32 commits.

See the full diff

Package name: libp2p-delegated-peer-routing The new version differs by 26 commits.

See the full diff

Package name: libp2p-kad-dht The new version differs by 139 commits.

See the full diff

Package name: libp2p-mplex The new version differs by 4 commits.

See the full diff

Package name: libp2p-secio The new version differs by 8 commits.

See the full diff

Package name: libp2p-webrtc-star The new version differs by 11 commits.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@snyk-bot