[Snyk] Upgrade file-type from 8.1.0 to 18.0.0

[eliavs-snyk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade file-type from 8.1.0 to 18.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 71 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2022-08-24.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: file-type

• 18.0.0 - 2022-08-24
  

  Breaking

  • Require Node.js 14 6d457c5

  v17.1.6...v18.0.0

• 17.1.6 - 2022-08-02
  
  • Fix an import path (#553) e843d73

  v17.1.5...v17.1.6

• 17.1.5 - 2022-08-02
  
  • Fix PDF detection in some cases a0c24eb

  v17.1.4...v17.1.5

• 17.1.4 - 2022-07-25
  
  • Fix a problem with a dependency (#549) 20a90ab

  v17.1.3...v17.1.4

• 17.1.3 - 2022-07-21
  
  • Fix: Malformed MKV could cause an infinite loop 2c4d120
    • CVE-2022-36313
    • Also backported to 16.5.4

  v17.1.2...v17.1.3

• 17.1.2 - 2022-06-01
  
  • Improve decoding of mime-type in ZIP file (#546) 1b10a71

  v17.1.1...v17.1.2

• 17.1.1 - 2021-12-28
  
  • Update dependencies (#519) 1a553e7

  v17.1.0...v17.1.1

• 17.1.0 - 2021-12-27
  
  • Add support for ELF (Unix Executable and Linkable Format) (#514) c4983ea
  • Add avif-sequence file for animation (#512) 752afb3

  v17.0.2...v17.1.0

• 17.0.2 - 2021-12-16
  
  • Prevent "Concurrent read operation" error to be thrown in some cases while reading from a stream (#510) 565f7f3

  v17.0.1...v17.0.2

• 17.0.1 - 2021-12-14
• 17.0.0 - 2021-11-24
• 16.5.4 - 2022-07-21
  
  • Fix: Malformed MKV could cause an infinite loop d868356
    • CVE-2022-36313
    • Also fixed in 17.1.3
• 16.5.3 - 2021-08-03
• 16.5.2 - 2021-07-20
• 16.5.1 - 2021-07-10
• 16.5.0 - 2021-05-28
• 16.4.0 - 2021-05-05
• 16.3.0 - 2021-03-06
• 16.2.0 - 2021-01-13
• 16.1.0 - 2020-12-21
• 16.0.1 - 2020-11-02
• 16.0.0 - 2020-10-18
• 15.0.1 - 2020-09-14
• 15.0.0 - 2020-08-26
• 14.7.1 - 2020-08-07
• 14.7.0 - 2020-08-02
• 14.6.2 - 2020-06-14
• 14.6.1 - 2020-06-07
• 14.6.0 - 2020-06-02
• 14.5.0 - 2020-05-21
• 14.4.0 - 2020-05-15
• 14.3.0 - 2020-05-04
• 14.2.0 - 2020-04-23
• 14.1.4 - 2020-03-11
• 14.1.3 - 2020-02-24
• 14.1.2 - 2020-02-12
• 14.1.1 - 2020-02-05
• 14.1.0 - 2020-02-05
• 14.0.0 - 2020-02-02
• 13.1.2 - 2020-01-22
• 13.1.1 - 2020-01-19
• 13.1.0 - 2020-01-15
• 13.0.3 - 2020-01-09
• 13.0.2 - 2020-01-07
• 13.0.1 - 2020-01-07
• 13.0.0 - 2020-01-07
• 12.4.2 - 2019-12-20
• 12.4.1 - 2019-12-19
• 12.4.0 - 2019-10-31
• 12.3.1 - 2019-10-22
• 12.3.0 - 2019-09-03
• 12.2.0 - 2019-08-18
• 12.1.0 - 2019-07-26
• 12.0.1 - 2019-07-06
• 12.0.0 - 2019-06-12
• 11.1.0 - 2019-05-23
• 11.0.0 - 2019-05-04
• 10.11.0 - 2019-04-11
• 10.10.0 - 2019-04-01
• 10.9.0 - 2019-03-05
• 10.8.0 - 2019-02-18
• 10.7.1 - 2019-01-22
• 10.7.0 - 2018-12-18
• 10.6.0 - 2018-12-03
• 10.5.0 - 2018-11-19
• 10.4.0 - 2018-11-02
• 10.3.0 - 2018-11-01
• 10.2.0 - 2018-10-28
• 10.1.0 - 2018-10-22
• 10.0.0 - 2018-10-07
• 9.0.0 - 2018-08-10
• 8.1.0 - 2018-07-08

from file-type GitHub release notes

Commit messages

Package name: file-type

• feac593 18.0.0
• 6d457c5 Require Node.js 14
• 8dff74d Update strtok3 to 7.0.0 & token-types to 5.0.0 ([Snyk] Fix for 2 vulnerable dependencies snyk-labs/nodejs-goof#552)
• 3fa1561 17.1.6
• e843d73 Fix import path for `ITokenizer` ([Snyk-dev] Fix for 37 vulnerable dependencies snyk-labs/nodejs-goof#553)
• 4a6c0db 17.1.5
• a0c24eb Recursive parsing after a UTF-8 BOM field
• dff7b7b Fix a couple of docs typos
• 4110073 17.1.4
• 20a90ab Update strtok3 to ^7.0.0-alpha.9 ([Snyk] Fix for 2 vulnerable dependencies snyk-labs/nodejs-goof#549)
• 41d13a3 17.1.3
• 2c4d120 Fix: Malformed MKV could cause an infinite loop
• 99cb019 17.1.2
• 1b10a71 Improve decoding of mime-type in ZIP file ([Snyk] Fix for 2 vulnerable dependencies snyk-labs/nodejs-goof#546)
• cffcf1f Add note about ESM
• 6c7ac31 Update GitHub Actions ([Snyk] Fix for 2 vulnerable dependencies snyk-labs/nodejs-goof#543)
• 330e6b9 Enforce alphabetical order for supported file types list ([Snyk] Fix for 1 vulnerable dependencies snyk-labs/nodejs-goof#531)
• 093eafe Remove duplicate code ([Snyk] Fix for 1 vulnerable dependencies snyk-labs/nodejs-goof#530)
• e4a809e Improve docs for `fileTypeFromBlob`
• d0f31fe 17.1.1
• d89a4a1 Improve signature ordering detection requirements ([Snyk-dev] Fix for 1 vulnerable dependencies snyk-labs/nodejs-goof#518)
• 1a553e7 Update dependencies ([Snyk-dev] Fix for 1 vulnerable dependencies snyk-labs/nodejs-goof#519)
• 6a57043 Document what we accept
• 97679ca 17.1.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs