Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Has a fix available, CVSS 7.4
SNYK-JS-ADMZIP-1065796
Why? Has a fix available, CVSS 8.1
SNYK-JS-AJV-584908
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-ANSIREGEX-1583908
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-ASYNC-2441827
Why? Proof of Concept exploit, Has a fix available, CVSS 9.3
SNYK-JS-BABELTRAVERSE-5962463
Why? Proof of Concept exploit, Has a fix available, CVSS 7.7
SNYK-JS-BL-608877
Why? Has a fix available, CVSS 8.2
SNYK-JS-BODYPARSER-7926860
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-BRACES-6838727
Why? Recently disclosed, Has a fix available, CVSS 6.3
SNYK-JS-COOKIE-8163060
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-DECODEURICOMPONENT-3149970
Why? Mature exploit, Has a fix available, CVSS 7.5
SNYK-JS-DICER-2311764
Why? Proof of Concept exploit, Has a fix available, CVSS 8.6
SNYK-JS-DUSTJSLINKEDIN-1089257
Why? Proof of Concept exploit, Has a fix available, CVSS 4.1
SNYK-JS-EJS-1049328
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
SNYK-JS-EJS-2803307
Why? Has a fix available, CVSS 5.3
SNYK-JS-EJS-6689533
Why? Has a fix available, CVSS 6.1
SNYK-JS-EXPRESS-6474509
Why? Has a fix available, CVSS 5.1
SNYK-JS-EXPRESS-7926867
Why? Has a fix available, CVSS 7.5
SNYK-JS-EXPRESSFILEUPLOAD-473997
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-EXPRESSFILEUPLOAD-595969
Why? Proof of Concept exploit, Has a fix available, CVSS 7
SNYK-JS-HANDLEBARS-1056767
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6
SNYK-JS-HANDLEBARS-1279029
Why? Has a fix available, CVSS 7.3
SNYK-JS-HANDLEBARS-173692
Why? Has a fix available, CVSS 7.3
SNYK-JS-HANDLEBARS-174183
Why? Has a fix available, CVSS 7.3
SNYK-JS-HANDLEBARS-469063
Why? Has a fix available, CVSS 7.5
SNYK-JS-HANDLEBARS-480388
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
SNYK-JS-HANDLEBARS-534478
Why? Has a fix available, CVSS 9.8
SNYK-JS-HANDLEBARS-534988
Why? Proof of Concept exploit, Has a fix available, CVSS 6.5
SNYK-JS-HANDLEBARS-567742
Why? Has a fix available, CVSS 5.8
SNYK-JS-HIGHLIGHTJS-1045326
Why? Has a fix available, CVSS 5.3
SNYK-JS-HIGHLIGHTJS-1048676
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-HOSTEDGITINFO-1088355
Why? Proof of Concept exploit, Has a fix available, CVSS 6.2
SNYK-JS-INFLIGHT-6095116
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
SNYK-JS-INI-1048974
Why? Has a fix available, CVSS 4.3
SNYK-JS-ISTANBULREPORTS-2328088
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6
SNYK-JS-JQUERY-174006
Why? Mature exploit, Has a fix available, CVSS 6.3
SNYK-JS-JQUERY-565129
Why? Mature exploit, Has a fix available, CVSS 6.5
SNYK-JS-JQUERY-567880
Why? Has a fix available, CVSS 8.6
SNYK-JS-JSONSCHEMA-1920922
Why? Proof of Concept exploit, Has a fix available, CVSS 8.4
SNYK-JS-KERBEROS-568900
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
SNYK-JS-KINDOF-537849
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-LODASH-1018905
Why? Proof of Concept exploit, Has a fix available, CVSS 7.2
SNYK-JS-LODASH-1040724
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3
SNYK-JS-LODASH-450202
Why? Proof of Concept exploit, Has a fix available, CVSS 8.2
SNYK-JS-LODASH-567746
Why?
SNYK-JS-LODASH-608086
Why?
SNYK-JS-LODASH-6139239
Why?
SNYK-JS-LODASH-73638
Why?
SNYK-JS-LODASH-73639
Why?
SNYK-JS-MARKED-174116
Why?
SNYK-JS-MARKED-2342073
Why?
SNYK-JS-MARKED-2342082
Why?
SNYK-JS-MARKED-451540
Why?
SNYK-JS-MARKED-584281
Why?
SNYK-JS-MICROMATCH-6838728
Why?
SNYK-JS-MINIMATCH-3050818
Why?
SNYK-JS-MINIMIST-2429795
Why?
SNYK-JS-MINIMIST-559764
Why?
SNYK-JS-MIXINDEEP-450212
Why?
SNYK-JS-MOMENT-2440688
Why?
SNYK-JS-MONGODB-473855
Why?
SNYK-JS-MONGOOSE-1086688
Why?
SNYK-JS-MONGOOSE-2961688
Why?
SNYK-JS-MONGOOSE-472486
Why?
SNYK-JS-MONGOOSE-5777721
Why?
SNYK-JS-MPATH-1577289
Why?
SNYK-JS-MQUERY-1050858
Why?
SNYK-JS-MQUERY-1089718
Why?
SNYK-JS-PATHPARSE-1077067
Why?
SNYK-JS-PATHTOREGEXP-7925106
Why?
SNYK-JS-QS-3153490
Why?
SNYK-JS-REQUEST-3361831
Why?
SNYK-JS-SEMVER-3247795
Why?
SNYK-JS-SEND-7926862
Why?
SNYK-JS-SERVESTATIC-7926865
Why?
SNYK-JS-SETVALUE-1540541
Why?
SNYK-JS-SETVALUE-450213
Why?
SNYK-JS-TOUGHCOOKIE-5672873
Why?
SNYK-JS-TYPEORM-590152
Why?
SNYK-JS-UGLIFYJS-1727251
Why?
SNYK-JS-UNSETVALUE-2400660
Why?
SNYK-JS-VALIDATOR-1090599
Why?
SNYK-JS-VALIDATOR-1090600
Why?
SNYK-JS-VALIDATOR-1090601
Why?
SNYK-JS-VALIDATOR-1090602
Why?
SNYK-JS-XML2JS-5414874
Why?
SNYK-JS-Y18N-1021887
Why?
SNYK-JS-YARGSPARSER-560381
Why? Mature exploit, Has a fix available, CVSS 9.4
npm:adm-zip:20180415
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7
npm:debug:20170905
Why? Has a fix available, CVSS 8.6
npm:dustjs-linkedin:20160819
Why? Has a fix available, CVSS 8.1
npm:ejs:20161128
Why? Has a fix available, CVSS 5.9
npm:ejs:20161130
Why? Has a fix available, CVSS 5.9
npm:ejs:20161130-1
Why? Has a fix available, CVSS 7.5
npm:fresh:20170908
Why? Has a fix available, CVSS 5.4
npm:jquery:20150627
Why? Proof of Concept exploit, Has a fix available, CVSS 6.3
npm:lodash:20180130
Why? Has a fix available, CVSS 8.8
npm:marked:20150520
Why? Has a fix available, CVSS 7.5
npm:marked:20170112
Why? Has a fix available, CVSS 7.5
npm:marked:20170815
Why? Has a fix available, CVSS 4.8
npm:marked:20170815-1
Why? Has a fix available, CVSS 7.5
npm:marked:20170907
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
npm:marked:20180225
Why? Has a fix available, CVSS 5.1
npm:mem:20180117
Why? Has a fix available, CVSS 3.7
npm:mime:20170907
Why? Has a fix available, CVSS 5.9
npm:moment:20161019
Why? Has a fix available, CVSS 3.7
npm:moment:20170905
Why? Mature exploit, Has a fix available, CVSS 5.1
npm:mongoose:20160116
Why? Has a fix available, CVSS 5.3
npm:ms:20151024
Why? Has a fix available, CVSS 3.7
npm:ms:20170412
Why? Has a fix available, CVSS 7.5
npm:negotiator:20160616
Why? Mature exploit, Has a fix available, CVSS 7.4
npm:npmconf:20180512
Why? Has a fix available, CVSS 7.5
npm:qs:20170213
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
npm:st:20140206
Why? Mature exploit, Has a fix available, CVSS 4.3
npm:st:20171013
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: adm-zip
The new version differs by 134 commits.See the full diff
Package name: body-parser
The new version differs by 250 commits.See the full diff
Package name: errorhandler
The new version differs by 106 commits.See the full diff
Package name: express
The new version differs by 250 commits.See the full diff
Package name: express-fileupload
The new version differs by 250 commits.See the full diff
Package name: express-session
The new version differs by 80 commits.See the full diff
Package name: hbs
The new version differs by 107 commits.