[Snyk] Upgrade: , bcrypt, moment, mongoose, swagger-jsdoc, swagger-ui-express #146
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@sendgrid/mail
from 7.4.5 to 7.7.0 | 7 versions ahead of your current version | 2 years ago
on 2022-05-18
bcrypt
from 5.0.1 to 5.1.1 | 2 versions ahead of your current version | a year ago
on 2023-08-16
moment
from 2.29.1 to 2.30.1 | 5 versions ahead of your current version | 8 months ago
on 2023-12-27
mongoose
from 5.13.2 to 5.13.22 | 20 versions ahead of your current version | 8 months ago
on 2024-01-02
swagger-jsdoc
from 6.1.0 to 6.2.8 | 9 versions ahead of your current version | 2 years ago
on 2023-01-16
swagger-ui-express
from 4.1.6 to 4.6.3 | 8 versions ahead of your current version | a year ago
on 2023-05-05
Issues fixed by the recommended upgrade:
SNYK-JS-MOMENT-2440688
SNYK-JS-MOMENT-2944238
SNYK-JS-MONGOOSE-2961688
SNYK-JS-MONGOOSE-5777721
SNYK-JS-TAR-1579147
SNYK-JS-TAR-1579152
SNYK-JS-ANSIREGEX-1583908
SNYK-JS-AXIOS-1579269
SNYK-JS-TAR-1579155
SNYK-JS-TAR-1536528
SNYK-JS-TAR-1536531
SNYK-JS-FOLLOWREDIRECTS-6141137
SNYK-JS-MONGODB-5871303
SNYK-JS-MPATH-1577289
SNYK-JS-NODEFETCH-2342118
SNYK-JS-SWAGGERUIDIST-2314884
SNYK-JS-TAR-6476909
SNYK-JS-VALIDATOR-1090599
SNYK-JS-VALIDATOR-1090600
SNYK-JS-VALIDATOR-1090601
SNYK-JS-VALIDATOR-1090602
SNYK-JS-SWAGGERUIDIST-6056393
SNYK-JS-SWAGGERUIEXPRESS-6815423
SNYK-JS-SWAGGERUIEXPRESS-6815424
SNYK-JS-FOLLOWREDIRECTS-2332181
SNYK-JS-FOLLOWREDIRECTS-6444610
SNYK-JS-TAR-1536758
SNYK-JS-FOLLOWREDIRECTS-2396346
Release notes
Package name: @sendgrid/mail
Release Notes
Library - Docs
Library - Feature
Library - Fix
Release Notes
Library - Chore
Library - Docs
Release Notes
Library - Chore
Library - Test
Library - Fix
Library - Docs
Release Notes
Library - Docs
Library - Feature
Release Notes
Library - Feature
Library - Docs
Library - Test
Package name: bcrypt
What's Changed
New Contributors
Full Changelog: v5.1.0...v5.1.1
What's Changed
New Contributors
Full Changelog: v5.0.1...v5.1.0
Update
node-pre-gyp
to 1.0.0Package name: moment
2.30.1
2.30.0
2.29.4
2.29.3
2.29.2
2.29.1
Package name: mongoose
Package name: swagger-jsdoc
Fixes cleaned up errors still logging doc path
…e-webhooks
fix(extensions): support multiple webhooks
Upgrade swagger-parser to fix vulnerability
Added version 7.x documentation in docusaurus
Added version 6.x docs in docusaurus
Docusaurus Documentation
docs: add section for failOnErrors option flag
Merge pull request #316 from daniloab/fix/channels-path
fix(channels): channels path for asyncapi
Merge pull request #308 from superflyxxi/fix/publish-to-npm
feat: publish to npm for master branch
Package name: swagger-ui-express
Support for Express 5
4.6.2
No content.
Accept array of external JS/CSS assets
No content.
4.4.0
No content.
No content.
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"","from":"sendgrid/mail","to":"sendgrid/mail"},{"name":"bcrypt","from":"5.0.1","to":"5.1.1"},{"name":"moment","from":"2.29.1","to":"2.30.1"},{"name":"mongoose","from":"5.13.2","to":"5.13.22"},{"name":"swagger-jsdoc","from":"6.1.0","to":"6.2.8"},{"name":"swagger-ui-express","from":"4.1.6","to":"4.6.3"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-MOMENT-2440688","issue_id":"SNYK-JS-MOMENT-2440688","priority_score":589,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Directory Traversal"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-MOMENT-2944238","issue_id":"SNYK-JS-MOMENT-2944238","priority_score":696,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-MONGOOSE-2961688","issue_id":"SNYK-JS-MONGOOSE-2961688","priority_score":671,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7","score":350},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Prototype Pollution"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-MONGOOSE-5777721","issue_id":"SNYK-JS-MONGOOSE-5777721","priority_score":726,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"8.1","score":405},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Prototype Pollution"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-TAR-1579147","issue_id":"SNYK-JS-TAR-1579147","priority_score":639,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"8.5","score":425},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Arbitrary File Write"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-TAR-1579152","issue_id":"SNYK-JS-TAR-1579152","priority_score":639,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"8.5","score":425},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Arbitrary File Write"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-ANSIREGEX-1583908","issue_id":"SNYK-JS-ANSIREGEX-1583908","priority_score":482,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-AXIOS-1579269","issue_id":"SNYK-JS-AXIOS-1579269","priority_score":696,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-TAR-1579155","issue_id":"SNYK-JS-TAR-1579155","priority_score":639,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"8.5","score":425},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Arbitrary File Write"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-TAR-1536528","issue_id":"SNYK-JS-TAR-1536528","priority_score":624,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"8.2","score":410},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Arbitrary File Overwrite"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-TAR-1536531","issue_id":"SNYK-JS-TAR-1536531","priority_score":624,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"8.2","score":410},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Arbitrary File Overwrite"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-FOLLOWREDIRECTS-6141137","issue_id":"SNYK-JS-FOLLOWREDIRECTS-6141137","priority_score":686,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.3","score":365},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Input Validation"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-MONGODB-5871303","issue_id":"SNYK-JS-MONGODB-5871303","priority_score":424,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"4.2","score":210},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Information Exposure"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-MPATH-1577289","issue_id":"SNYK-JS-MPATH-1577289","priority_score":601,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.6","score":280},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Prototype Pollution"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-NODEFETCH-2342118","issue_id":"SNYK-JS-NODEFETCH-2342118","priority_score":539,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.5","score":325},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Information Exposure"},{"exploit_maturity":"mature","id":"SNYK-JS-SWAGGERUIDIST-2314884","issue_id":"SNYK-JS-SWAGGERUIDIST-2314884","priority_score":656,"priority_score_factors":[{"type":"exploit","label":"Functional","score":171},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.4","score":270},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Server-side Request Forgery (SSRF)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-TAR-6476909","issue_id":"SNYK-JS-TAR-6476909","priority_score":432,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.5","score":325},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Uncontrolled Resource Consumption ('Resource Exhaustion')"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-VALIDATOR-1090599","issue_id":"SNYK-JS-VALIDATOR-1090599","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-VALIDATOR-1090600","issue_id":"SNYK-JS-VALIDATOR-1090600","priority_score":372,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-VALIDATOR-1090601","issue_id":"SNYK-JS-VALIDATOR-1090601","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-VALIDATOR-1090602","issue_id":"SNYK-JS-VALIDATOR-1090602","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-SWAGGERUIDIST-6056393","issue_id":"SNYK-JS-SWAGGERUIDIST-6056393","priority_score":591,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.4","score":270},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Server-side Request Forgery (SSRF)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-SWAGGERUIEXPRESS-6815423","issue_id":"SNYK-JS-SWAGGERUIEXPRESS-6815423","priority_score":591,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.4","score":270},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Server-side Request Forgery (SSRF)"},{"exploit_maturity":"mature","id":"SNYK-JS-SWAGGERUIEXPRESS-6815424","issue_id":"SNYK-JS-SWAGGERUIEXPRESS-6815424","priority_score":656,"priority_score_factors":[{"type":"exploit","label":"Functional","score":171},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.4","score":270},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Server-side Request Forgery (SSRF)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-FOLLOWREDIRECTS-2332181","issue_id":"SNYK-JS-FOLLOWREDIRECTS-2332181","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Information Exposure"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-FOLLOWREDIRECTS-6444610","issue_id":"SNYK-JS-FOLLOWREDIRECTS-6444610","priority_score":646,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.5","score":325},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Information Exposure"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-TAR-1536758","issue_id":"SNYK-JS-TAR-1536758","priority_score":410,"priority_score_factors":[{"type":"exploit","label":"Unproven","score":11},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"3.7","score":185},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-FOLLOWREDIRECTS-2396346","issue_id":"SNYK-JS-FOLLOWREDIRECTS-2396346","priority_score":344,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"2.6","score":130},{"type":"scoreVersion","label":"v1","score":1}],"severity":"low","title":"Information Exposure"}],"prId":"de68c181-31d9-4e92-9041-24a1e8b91b3a","prPublicId":"de68c181-31d9-4e92-9041-24a1e8b91b3a","packageManager":"npm","priorityScoreList":[589,696,671,726,639,639,482,696,639,624,624,686,424,601,539,656,432,586,372,586,586,591,591,656,586,646,410,344],"projectPublicId":"b2005f2f-da65-4663-a828-5f77dd807ac0","projectUrl":"https://app.snyk.io/org/godrun666/project/b2005f2f-da65-4663-a828-5f77dd807ac0?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-MOMENT-2440688","SNYK-JS-MOMENT-2944238","SNYK-JS-MONGOOSE-2961688","SNYK-JS-MONGOOSE-5777721","SNYK-JS-TAR-1579147","SNYK-JS-TAR-1579152","SNYK-JS-ANSIREGEX-1583908","SNYK-JS-AXIOS-1579269","SNYK-JS-TAR-1579155","SNYK-JS-TAR-1536528","SNYK-JS-TAR-1536531","SNYK-JS-FOLLOWREDIRECTS-6141137","SNYK-JS-MONGODB-5871303","SNYK-JS-MPATH-1577289","SNYK-JS-NODEFETCH-2342118","SNYK-JS-SWAGGERUIDIST-2314884","SNYK-JS-TAR-6476909","SNYK-JS-VALIDATOR-1090599","SNYK-JS-VALIDATOR-1090600","SNYK-JS-VALIDATOR-1090601","SNYK-JS-VALIDATOR-1090602","SNYK-JS-SWAGGERUIDIST-6056393","SNYK-JS-SWAGGERUIEXPRESS-6815423","SNYK-JS-SWAGGERUIEXPRESS-6815424","SNYK-JS-FOLLOWREDIRECTS-2332181","SNYK-JS-FOLLOWREDIRECTS-6444610","SNYK-JS-TAR-1536758","SNYK-JS-FOLLOWREDIRECTS-2396346"],"upgradeInfo":{"versionsDiff":7,"publishedDate":"2022-05-18T20:41:37.170Z"},"vulns":["SNYK-JS-MOMENT-2440688","SNYK-JS-MOMENT-2944238","SNYK-JS-MONGOOSE-2961688","SNYK-JS-MONGOOSE-5777721","SNYK-JS-TAR-1579147","SNYK-JS-TAR-1579152","SNYK-JS-ANSIREGEX-1583908","SNYK-JS-AXIOS-1579269","SNYK-JS-TAR-1579155","SNYK-JS-TAR-1536528","SNYK-JS-TAR-1536531","SNYK-JS-FOLLOWREDIRECTS-6141137","SNYK-JS-MONGODB-5871303","SNYK-JS-MPATH-1577289","SNYK-JS-NODEFETCH-2342118","SNYK-JS-SWAGGERUIDIST-2314884","SNYK-JS-TAR-6476909","SNYK-JS-VALIDATOR-1090599","SNYK-JS-VALIDATOR-1090600","SNYK-JS-VALIDATOR-1090601","SNYK-JS-VALIDATOR-1090602","SNYK-JS-SWAGGERUIDIST-6056393","SNYK-JS-SWAGGERUIEXPRESS-6815423","SNYK-JS-SWAGGERUIEXPRESS-6815424","SNYK-JS-FOLLOWREDIRECTS-2332181","SNYK-JS-FOLLOWREDIRECTS-6444610","SNYK-JS-TAR-1536758","SNYK-JS-FOLLOWREDIRECTS-2396346"]}'