Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 1 vulnerabilities #62

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 1 vulnerabilities #62

wants to merge 1 commit into from

Conversation

saurabharch
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		 Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		 Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: gulp-babel The new version differs by 3 commits.

See the full diff

Package name: gulp-istanbul The new version differs by 40 commits.

See the full diff

Package name: gulp-mocha The new version differs by 16 commits.
  • be439ff 4.0.0
  • f9de4ec Cleanup #151
  • 3e55175 Spawn Mocha instead of using its API (#151)
  • 212def2 3.0.1
  • bcdabff trying out something new
  • de45b26 3.0.0
  • ab510ce meta tweaks
  • 9bb2505 Bump mocha dependency (#139)
  • f2cac8b Merge pull request #111 from Coaxial/fix/shared-state-warning
  • efc4880 Merge pull request #114 from seanzer/fail-on-exception
  • 01ed2cb maintainer needed
  • 898f748 Close #120 PR: Test on Node.js v4 and v5.
  • bffdb4c switch to `req-cwd` module
  • 225d355 Update readme.md
  • 65ec625 Report errors during test as failures
  • e349184 Add watch task warning, close #110

See the full diff

Package name: gulp-sass The new version differs by 42 commits.
  • 5775044 Update CHANGELOG.md
  • 978b8f6 Update to major version 5 (#802)
  • 10eae93 Update changelog for 4.1.1
  • 947b26c Upgrade lodash to fix a security issue (#776)
  • 8d6ac29 Update changelog
  • 43c0547 4.1.0
  • ebe3ec6 Set appropriate file stat times (#763)
  • 7ab018e Migrate to the lodash package
  • fa670c6 4.0.2
  • fefa00e Revert package.json version bump
  • 98254d2 Fix README typos
  • 8a14419 Continue loading Node Sass by default
  • 938afbe Add a note about synchronous versus asynchronous speed
  • 7cc2db1 Make this package implementation-agnostic
  • 643f73b Add documentation for synchronous code options
  • 0b3c7e7 4.0.1
  • daca90d Merge pull request #681 from DKvistgaard/master
  • 71471c2 Declaring logError as function instead of arrow function.
  • 450a7b8 4.0.0
  • e9b1fe8 Fix node versions in appveyor.yml
  • 44be409 Merge pull request #667 from dlmanning/next
  • 7656eff Adopt airbnb eslint preset
  • 1293169 Bump autoprefixer@^8.1.0, gulp-postcss@^7.0.1
  • 9fa817b Bump gulp-sourcemaps@^2.6.4

See the full diff

Package name: karma The new version differs by 88 commits.
  • 2c9be5a chore: release v0.13.0
  • c658c9d chore: update contributors
  • ecee70a Merge branch 'canary'
  • 7685484 chore: Update dependencies
  • c25c91c chore: release v0.13.0-rc.9
  • a4b5cdd feat(logger): Add date/time stamp to log output
  • 6a9df4a Updated example to have comment about libraries
  • 7ed6be7 docs(readme): All support goes to gitter and the mailing list
  • bcce563 Merge pull request #1491 from Dignifiedquire/terinjokes-fix-http-proxy
  • 4a59443 feat(logger): Add date/time stamp to log output
  • 04f408f Merge branch 'fix-http-proxy' of https://github.com/terinjokes/karma into terinjokes-fix-http-proxy
  • 0ce9df6 Merge branch 'canary' of github.com:karma-runner/karma into canary
  • e364149 Merge pull request #1485 from Dignifiedquire/server-api
  • 4d1fa24 chore: release v0.13.0-rc.8
  • 3019c0c Merge pull request #1487 from KJTsanaktsidis/canary
  • 32eec8d fix(web-server): Correctly update filesPromise on files updated
  • 68b5208 chore: release v0.13.0-rc.7
  • 82cbbad feat(server): improve public api
  • 48e3000 chore: Code cleanup and linting fixes
  • 7e37a23 Merge pull request #1442 from tailsu/sd/context-json
  • 31494cb Merge pull request #1471 from Dignifiedquire/glob-sync
  • b16e6e2 Merge pull request #1481 from Dignifiedquire/1106-stringify-dom-elements
  • 1f73be4 fix(client): serialise DOM objects
  • 211939f Merge pull request #1472 from anshbansal/patch-1

See the full diff

Package name: karma-mocha-reporter The new version differs by 2 commits.
  • f1b2eac chore: Release v2.0.0
  • b638643 chore: move karma to peerDependencies

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@snyk-bot
fix: package.json to reduce vulnerabilities
fd91e51 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@saurabharch @snyk-bot