Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #8

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • microtrader-specs/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 471/1000
Why? Recently disclosed, Has a fix available, CVSS 3.7
Prototype Pollution
SNYK-JS-MINIMIST-2429795
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: mocha The new version differs by 250 commits.
  • eb781e2 Release v6.2.3
  • 10dbe94 update CHANGELOG for v6.2.3 [ci skip]
  • 848d6fb security: update mkdirp, yargs, yargs-parser
  • 843a322 6.2.2
  • aec8b02 update CHANGELOG for v6.2.2 [ci skip]
  • 7a8b95a npm audit fixes
  • cebddf2 Improve reporter documentation for mocha in browser. (#4026)
  • 3f7b987 uncaughtException: report more than one exception per test (#4033)
  • ee82d38 modify alt text of image from Backers to Sponsors inside Sponsors section in Readme (#4046)
  • e9c036c special-case parsing of "require" in unparseNodeArgs(); closes #4035 (#4063)
  • 954cf0b Fix HTMLCollection iteration to make unhide function work as expected (#4051)
  • 816dc27 uncaughtException: fix double EVENT_RUN_END events (#4025)
  • 9650d3f add OpenJS Foundation logo to website (#4008)
  • f04b81d Adopt the OpenJSF Code of Conduct (#3971)
  • aca8895 Add link checking to docs build step (#3972)
  • ef6c820 Release v6.2.1
  • 9524978 updated CHANGELOG for v6.2.1 [ci skip]
  • dfdb8b3 Update yargs to v13.3.0 (#3986)
  • 18ad1c1 treat '--require esm' as Node option (#3983)
  • fcffd5a Update yargs-unparser to v1.6.0 (#3984)
  • ad4860e Remove extraGlobals() (#3970)
  • b269ad0 Clarify effect of .skip() (#3947)
  • 1e6cf3b Add Matomo to website (#3765)
  • 91b3a54 fix style on mochajs.org (#3886)

See the full diff

Package name: mocha-jenkins-reporter The new version differs by 86 commits.
  • c4ad366 Update version number to 0.4.3
  • b12abe1 also update mocha
  • 16c2ba3 update mkdirp to fix security issue
  • 93e5b23 [misc] fix the dependency relation with mocha
  • d313c64 Update version number to 0.4.2.
  • cb036cc Upgrade eslint to avoid a vulnerability warning.
  • da16815 Upgrade diff to the latest version, should be compatible.
  • 70a7625 Remove invalid characters from failure message.
  • 2747938 Update version number to 0.4.1.
  • 939f2af Better support skipped cypress.io test cases
  • 38472fb Update version number to 0.4.0.
  • f04d816 Merge pull request #79 from mrbar42/patch-1
  • e95468c update mocha due to vulnerability
  • dd99369 Update version number to 0.3.12.
  • ac36626 Fix a possible crash as suggested by #51.
  • ae5cfb6 Update README to avoid confusion.
  • 707f690 Enable the epilogue again, but this time inside a try-catch.
  • 3736ba4 Merge pull request #73 from eyalzek/fix/fd-closed
  • f3f582a Update version number to 0.3.11.
  • a029c0e Merge pull request #76 from lmarkus/master
  • ef2ba3a Use the checkmark (✓) character for passing tests. Fixes #67
  • d2da9ad Merge pull request #71 from dostu/master
  • 61aa7c7 Comment out `epilogue` for now
  • ca75b70 Set `fd` to null after closing it

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant