GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — [Snyk] Security upgrade node-pre-gyp from 0.6.39 to 0.9.0 by jmatsushita · Pull Request #16 · contentascode/nodegit

Conversation

@jmatsushita

@jmatsushita jmatsushita commented Jun 29, 2022

Copy link
Copy Markdown
Member

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 584/1000
Why? Has a fix available, CVSS 7.4		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-HAWK-2808852		 No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: node-pre-gyp The new version differs by 42 commits.
  • 13c5ad0 bump to v0.9.0
  • 07e7ee5 Merge pull request WIP: Refactor publishing nodegit/nodegit#350 from cktang88/master
  • 9a9089b Replace request with needle
  • 2844fa4 bump to v0.8.0 with N-API support
  • b22612c remove node-pre-gyp dep from app7 package.json
  • 9bb97af Merge pull request Update dependency node-pre-gyp to ~0.6 nodegit/nodegit#345 from inspiredware/napi-support
  • c31cce4 Merge branch 'master' into napi-support
  • cf3ebb6 bump to v0.7.1 with tar v4.x
  • 9bc1ff3 avoid double declare of tape in devDeps
  • b1ce220 fix package.json syntax
  • e9fb2e5 Merge pull request Module fails to load nodegit/nodegit#299 from isaacs/master
  • 81f2e60 Merge branch 'master' into master
  • e7bb6cd bump to v0.7.0 / drop node v0.10.x support
  • 837c48b update versions
  • af507d1 Merge pull request Added checkout head method and tests nodegit/nodegit#347 from krotscheck/hawk
  • eda90e0 Remove dependency on hawk, upgrade request
  • 9684ef6 Another CI build tweak
  • 9870491 Addresses CI build errors
  • b2ed35a update with latest versions
  • e352a05 kick travis
  • 37eb637 bump to v0.6.40
  • 8f7c497 CI tweaks
  • 488ac7b Fix for code cleanup
  • 82a641e Code cleanup.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@snyk-bot
fix: package.json & package-lock.json to reduce vulnerabilities
03e5187 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HAWK-2808852
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

2 participants

@jmatsushita @snyk-bot
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.