Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade winston from 3.3.3 to 3.13.1 #932

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

[Snyk] Upgrade winston from 3.3.3 to 3.13.1 #932

wants to merge 1 commit into from

Conversation

drnachio
Copy link
Contributor

@drnachio drnachio commented Aug 6, 2024

snyk-top-banner

Snyk has created this PR to upgrade winston from 3.3.3 to 3.13.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 17 versions ahead of your current version.

  • The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 482 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-ENGINEIO-1056749		 482 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-ENGINEIO-3136336		 482 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-ASYNC-2441827		 482 Proof of Concept
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727		 482 Proof of Concept
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727		 482 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-INI-1048974		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		 482 No Known Exploit
high severity Uncaught Exception
SNYK-JS-SOCKETIO-7278048		 482 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-1056752		 482 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-5596892		 482 No Known Exploit
high severity Command Injection
SNYK-JS-SSH2-1656673		 482 No Known Exploit
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 482 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905		 482 Proof of Concept
medium severity Open Redirect
SNYK-JS-GOT-2932019		 482 No Known Exploit
medium severity Open Redirect
SNYK-JS-GOT-2932019		 482 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		 482 Proof of Concept
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-COLORSTRING-1082939		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HTTPCACHESEMANTICS-3248783		 482 Proof of Concept
medium severity Server-Side Request Forgery (SSRF)
SNYK-JS-IP-7148531		 482 Proof of Concept
medium severity Reverse Tabnabbing
SNYK-JS-ISTANBULREPORTS-2328088		 482 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856		 482 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856		 482 Proof of Concept
medium severity Denial of Service (DoS)
SNYK-JS-JSZIP-1251497		 482 Proof of Concept
medium severity Arbitrary File Write via Archive Extraction (Zip Slip)
SNYK-JS-JSZIP-3188562		 482 No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JS-JSZIP-1251497		 482 Proof of Concept
medium severity Arbitrary File Write via Archive Extraction (Zip Slip)
SNYK-JS-JSZIP-3188562		 482 No Known Exploit
medium severity Command Injection
SNYK-JS-SNYKPYTHONPLUGIN-3039677		 482 Proof of Concept
medium severity Command Injection
SNYK-JS-SNYKSBTPLUGIN-3038626		 482 Proof of Concept
medium severity Command Injection
SNYK-JS-SNYKSNYKCOCOAPODSPLUGIN-3038625		 482 Proof of Concept
medium severity Insecure Defaults
SNYK-JS-SOCKETIO-1024859		 482 Proof of Concept
critical severity Improper Input Validation
SNYK-JS-SOCKETIOPARSER-3091012		 482 No Known Exploit
critical severity Improper Input Validation
SNYK-JS-SOCKETIOPARSER-3091012		 482 No Known Exploit
high severity Prototype Pollution
SNYK-JS-NCONF-2395478		 482 Proof of Concept
high severity Server-side Request Forgery (SSRF)
SNYK-JS-NETMASK-1089716		 482 Proof of Concept
high severity Server-side Request Forgery (SSRF)
SNYK-JS-NETMASK-6056519		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-NORMALIZEURL-1296539		 482 No Known Exploit
high severity Remote Code Execution (RCE)
SNYK-JS-PUG-1071616		 482 Proof of Concept
high severity Remote Code Execution (RCE)
SNYK-JS-PUGCODEGEN-1082232		 482 Proof of Concept
high severity Improper Control of Generation of Code ('Code Injection')
SNYK-JS-PUGCODEGEN-7086056		 482 Proof of Concept
high severity Prototype Poisoning
SNYK-JS-QS-3153490		 482 Proof of Concept
high severity Code Injection
SNYK-JS-LODASH-1040724		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASHSET-1320032		 482 Proof of Concept
high severity Infinite loop
SNYK-JS-MARKDOWNIT-6483324		 482 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574		 482 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574		 482 Proof of Concept
high severity Arbitrary Code Injection
SNYK-JS-XMLHTTPREQUESTSSL-1082936		 482 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-TRIMNEWLINES-1298042		 482 No Known Exploit
high severity Access Restriction Bypass
SNYK-JS-XMLHTTPREQUESTSSL-1255647		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-Y18N-1021887		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-Y18N-1021887		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-UNSETVALUE-2400660		 482 No Known Exploit
high severity Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864		 482 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 482 No Known Exploit
high severity Internal Property Tampering
SNYK-JS-TAFFYDB-2992450		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-TMPL-1583443		 482 Proof of Concept
high severity Code Injection
SNYK-JS-LODASH-1040724		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-LODASH-567746		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-AJV-584908		 482 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 482 Proof of Concept
high severity Remote Code Execution (RCE)
SNYK-JS-PACRESOLVER-1564857		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PARSELINKHEADER-1582783		 482 Proof of Concept
medium severity Command Injection
SNYK-JS-SNYK-3037342		 482 Proof of Concept
medium severity Command Injection
SNYK-JS-SNYK-3038622		 482 Proof of Concept
medium severity Code Injection
SNYK-JS-SNYK-3111871		 482 No Known Exploit
medium severity Command Injection
SNYK-JS-SNYKDOCKERPLUGIN-3039679		 482 Proof of Concept
medium severity Command Injection
SNYK-JS-SNYKGOPLUGIN-3037316		 482 Proof of Concept
medium severity Command Injection
SNYK-JS-SNYKGRADLEPLUGIN-3038624		 482 Proof of Concept
medium severity Command Injection
SNYK-JS-SNYKMVNPLUGIN-3038623		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		 482 No Known Exploit
medium severity Command Injection
SNYK-JS-NODENOTIFIER-1035794		 482 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKDOWNIT-2331914		 482 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-2342073		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-2342082		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 482 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-XML2JS-5414874		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251		 482 No Known Exploit
medium severity Arbitrary Code Injection
SNYK-JS-UNDERSCORE-1080984		 482 Proof of Concept
medium severity Arbitrary Code Injection
SNYK-JS-UNDERSCORE-1080984		 482 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-VUETEMPLATECOMPILER-7554675		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-584281		 482 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 482 Proof of Concept
medium severity Denial of Service (DoS)
SNYK-JS-NWSAPI-2841516		 482 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PROMPTS-1729737		 482 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		 482 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973		 482 Proof of Concept
Release notes
Package name: winston

@snyk-bot
fix: upgrade winston from 3.3.3 to 3.13.1
91f9876 
Snyk has created this PR to upgrade winston from 3.3.3 to 3.13.1.

See this package in npm:
winston

See this project in Snyk:
https://app.snyk.io/org/drnachio/project/0235dece-0710-40d2-b9c0-b6ae0c08e4a4?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@drnachio @snyk-bot