[Snyk] Fix for 4 vulnerabilities #60

simha95 · 2022-08-23T02:50:32Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json

Vulnerabilities that will be fixed

With an upgrade:

Priority Score (*)	Issue	Breaking Change	Exploit Maturity
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	Yes	Proof of Concept
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	Yes	Proof of Concept
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	Yes	Proof of Concept
586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: anchor

The new version differs by 84 commits.

f24a4fe 1.4.1
609cef2 Update isURL validation and add localhost test (req and res available in views balderdashy/sails#113)
2bb793a Update validator@13.7.0 (switching to production balderdashy/sails#112)
f871463 1.4.0
18e0e7f Add original invalid data to the error message for selected rules, in order to reduce the time it takes to debug mistakes
bfcd549 Minor improvement to test output.
e42acb7 1.3.0
4e519da Nabbed one other one I missed
7d77b02 Finish the rest of the TODOs began in d6f82e75d3827ceee6e0000b9e98cc752f461f51
f05f536 Take care of some of the TODOs from previous commit. Also add an isError check when handling errors thrown from validation rules to prevent potential issues in extreme edge cases (where something weird gets thrown)
d6f82e7 Add validator upgrade TODOs, and remove old commented out isNotNull thing (it's no longer relevant)
ea3a236 Added a few more tests.
238d362 Reroll isBefore and isAfter the dumb, explicit way.
f72ef98 Clean up checkConfig for isBefore and isAfter, and clarify another comment.
167a02d Tweak checkConfig error msgs for isBefore+isAfter
ee27777 Add todo for future
0e2805c Fix out of date test label
55d9fbe Clean up tests so they report more helpful stuff.
144d872 Bump validator version re https://snyk.io/test/npm/anchor?severity=high&severity=medium&severity=low#npm:validator:20160218 (without applying any of the necessary changes yet, if there are any). Also upgrade to latest eslintrc file, etc, and bump eslint dep.
41dd3e0 1.2.1
10c7e86 Fix build status urls
f6b689b Avoid confusion
b429872 More of the same
63fe204 Trivial

See the full diff

Package name: sails-hook-orm

The new version differs by 250 commits.

1e9e6f2 2.0.0
58eef54 2.0.0-23
0e2134f Update eslintrc, and fix something trivial
1db6353 Fix https://github.com/Sails request hangs on sails.getDataStore().transaction(fn) , and fn seems not executed when sails-mysql upgraded to 1.0.0-16 balderdashy/sails#4271
f2c2fc0 Use `name: 'userError'` instead of sending strings back as error arguments to callbacks.
6f33b31 More friendly error for invalid datastore config
3df2117 Don't allow model instance methods at all.
8b025f1 Update warning msg (now that we're using neDB it needn't come across quite as dire)
6e678df 2.0.0-22
1b5884d Bump parley dep to improve error messages (not to mention all of the other rich, complicated goodness that comes from the latest release)
a077af7 Add slightly more accurate suffix to error msg (e.g. to improve the output when attempting to use .transaction() with sails-disk)
1facd90 Properly catch unhandled promise rejections and tolerate non-Errors from procedural parameters (to allow for special exit signals and other flow control paradigms). Solves https://trello.com/c/Yv4BGFwr
df71162 Added sanity check w/ better error msg.
a1c585d If invalid model definitions are detected, just return an error message _without_ a stack trace.
e418590 Validate validation rule configuration
d537073 Turn off archiving for tests
e21b429 Set default datastore adapter to `sails-disk` (string), and make sure it's loaded last.
bc48bd1 trivial
650eec7 Dont globalize models with the _private flag attached.
47d373a trivial
8139c26 2.0.0-21
91580df Bump Waterline version and set to semver range
43c78ed 2.0.0-20
5a96e59 Update scripts and update eslint.

See the full diff

Package name: waterline

The new version differs by 250 commits.

2c5ec51 0.13.1
8156b23 Fixes https://github.com/Decryption doesn't work for records created with Model.findOrCreate method balderdashy/sails#4302#issuecomment-363883885
9a32b31 Add note re https://github.com/Decryption doesn't work for records created with Model.findOrCreate method balderdashy/sails#4302#issuecomment-363883885
858fe59 Update LICENSE.md
0a93d56 Make toJSON overridable to avoid confusing behavior in userland code.
47ffea6 update to use `await` and include subtle link to manifesto
f6313b4 force bump deps to ensure latest anchor
c2ff1ca Lint fix, and take care of a documentation todo
76dab58 Update eslint dep to 4, and update eslintrc.
e704ffb Force bump to latest parley.
86bccd6 0.13.1-9
1d0878d Tolerate non-Errors to allow for special exit signals and compatibility with other flow control paradigms.
13a64fc Take care of unhandled promise rejections in .stream() iteratees (fixes https://trello.com/c/5JGI0c66)
3311327 Enhance error message
1d747f6 Fix typos
27f472c Same as https://github.com/node-machine/machine/commit/8c4c2d81005959876406510b34bc9df6bcf19f5f
7d809e5 Minor tweak to error msg
7c71dbe Don't apply `omit` criteria to join tables
d2cc874 0.13.1-8
7aca522 Attempt at doing https://github.com/[patch] Use Node version check to determine whether to process encryption options for each model balderdashy/waterline#1532/files with a slightly smaller change footprint (How to make unit test easier to integrate in a project ? balderdashy/sails#1533)
fb8a1e4 Tweak previous commit to ensure a good error msg is shown
5aa605a Attempt at doing https://github.com/[patch] Use Node version check to determine whether to process encryption options for each model balderdashy/waterline#1532/files with a slightly smaller change footprint
52e61bc 0.13.1-7
6efcda1 Improve error message about bad pk type, particularly for users of mongo/rethink/etc. (https://trello.com/c/x6VSjZbc)