[Snyk] Upgrade: body-parser, express, fabric-ca-client, fabric-network, morgan, nodemon #9
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
body-parser
from 1.19.0 to 1.20.2 | 5 versions ahead of your current version | 2 years ago
on 2023-02-22
express
from 4.17.1 to 4.19.2 | 9 versions ahead of your current version | 6 months ago
on 2024-03-25
fabric-ca-client
from 1.4.5 to 1.4.20 | 67 versions ahead of your current version | 2 years ago
on 2022-05-12
fabric-network
from 1.4.5 to 1.4.20 | 67 versions ahead of your current version | 2 years ago
on 2022-05-12
morgan
from 1.9.1 to 1.10.0 | 1 version ahead of your current version | 4 years ago
on 2020-03-20
nodemon
from 2.0.2 to 2.0.22 | 30 versions ahead of your current version | a year ago
on 2023-03-22
Issues fixed by the recommended upgrade:
SNYK-JS-TAR-1536531
SNYK-JS-TAR-1579147
SNYK-JS-NCONF-2395478
SNYK-JS-QS-3153490
SNYK-JS-QS-3153490
SNYK-JS-TAR-1536528
SNYK-JS-ELLIPTIC-571484
SNYK-JS-GRPC-598671
SNYK-JS-TAR-1579152
SNYK-JS-TAR-1579155
SNYK-JS-Y18N-1021887
SNYK-JS-INI-1048974
SNYK-JS-JSONSCHEMA-1920922
SNYK-JS-JSRSASIGN-2869122
SNYK-JS-AJV-584908
SNYK-JS-AJV-584908
SNYK-JS-BL-608877
SNYK-JS-BODYPARSER-7926860
SNYK-JS-BRACES-6838727
SNYK-JS-LODASH-1040724
SNYK-JS-LODASH-567746
SNYK-JS-LODASH-608086
SNYK-JS-LODASH-6139239
SNYK-JS-ELLIPTIC-1064899
SNYK-JS-EXPRESS-6474509
SNYK-JS-EXPRESS-7926867
SNYK-JS-GLOBPARENT-1016905
SNYK-JS-GOT-2932019
SNYK-JS-TAR-6476909
SNYK-JS-UNDEFSAFE-548940
SNYK-JS-JSRSASIGN-1244072
SNYK-JS-JSRSASIGN-561755
SNYK-JS-JSRSASIGN-572937
SNYK-JS-JSRSASIGN-572938
SNYK-JS-DOTPROP-543489
SNYK-JS-LODASH-1018905
SNYK-JS-MINIMIST-559764
SNYK-JS-MINIMIST-559764
npm:debug:20170905
SNYK-JS-TAR-1536758
npm:debug:20170905
SNYK-JS-SEND-7926862
SNYK-JS-SERVESTATIC-7926865
SNYK-JS-ELLIPTIC-7577916
SNYK-JS-ELLIPTIC-7577917
SNYK-JS-ELLIPTIC-7577918
SNYK-JS-MINIMATCH-3050818
SNYK-JS-WORDWRAP-3149973
SNYK-JS-JSRSASIGN-572936
SNYK-JS-MINIMIST-2429795
SNYK-JS-MINIMIST-2429795
Release notes
Package name: body-parser
strict
eval
usage withFunction
constructorprocess
to check for listeners__proto__
keyspb
) supportthrow
on invalid typePackage name: express
What's Changed
Full Changelog: 4.19.0...4.19.1
What's Changed
New Contributors
Full Changelog: 4.18.3...4.19.0
Main Changes
Other Changes
New Contributors
Full Changelog: 4.18.2...4.18.3
res.download
options
withoutfilename
inres.download
res.status
null
/undefined
asmaxAge
inres.cookie
Object.prototype
values in settings throughapp.set
/app.get
default
with same arguments as types inres.format
res.send
http-errors
forres.format
errorstrict
priority
optionexpires
option to reject invalid dateseval
usage withFunction
constructorprocess
to check for listeners425 Unordered Collection
to standard425 Too Early
__proto__
keysundefined
inres.jsonp
undefined
when"json escape"
is enabledRegExp
sres.jsonp(obj, status)
deprecation messageres.is
JSDocmaxAge
option to reject invalid valuesreq.socket
over deprecatedreq.connection
Package name: fabric-ca-client
Changes
This is a maintenance release containing the following enhancements:
eventHandlerOptions.endorseTimeout
property to the Gateway connect options.Security fixes
The following security vulnerability is addressed:
New Contributors
Package name: fabric-network
Changes
This is a maintenance release containing the following enhancements:
eventHandlerOptions.endorseTimeout
property to the Gateway connect options.Security fixes
The following security vulnerability is addressed:
New Contributors
Package name: morgan
:total-time
tokendev
formateval
usage withFunction
constructorprocess
to check for listenersres.writeHead
patch missing return valuePackage name: nodemon
2.0.22 (2023-03-22)
Bug Fixes
2.0.21 (2023-03-02)
Bug Fixes
2.0.20 (2022-09-16)
Bug Fixes
2.0.19 (2022-07-05)
Bug Fixes
2.0.18 (2022-06-23)
Bug Fixes
2.0.17 (2022-06-23)
Bug Fixes
2.0.16 (2022-04-29)
Bug Fixes
2.0.15 (2021-11-09)
Bug Fixes
2.0.14 (2021-10-19)
Bug Fixes
2.0.13 (2021-09-23)
Bug Fixes