Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade knex from 0.20.13 to 0.95.15 #79

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade knex from 0.20.13 to 0.95.15 #79

wants to merge 1 commit into from

Conversation

deniavsa
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade knex from 0.20.13 to 0.95.15.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 51 versions ahead of your current version.

  • The recommended version was released 2 years ago, on 2021-12-21.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Command Injection
SNYK-JS-LODASH-1040724		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 Proof of Concept
Prototype Pollution
SNYK-JS-UNSETVALUE-2400660		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 No Known Exploit
Uncontrolled resource consumption
SNYK-JS-BRACES-6838727		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 Proof of Concept
Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-567746		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-608086		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-6139239		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 Proof of Concept
Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 372/1000
Why? Proof of Concept exploit, CVSS 5.3		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: knex
  • 0.95.15 - 2021-12-21
  • 0.95.14 - 2021-11-08
  • 0.95.13 - 2021-11-02
  • 0.95.12 - 2021-10-27
  • 0.95.12-rc6 - 2021-10-27
  • 0.95.12-rc5 - 2021-10-25
  • 0.95.12-rc4 - 2021-10-20
  • 0.95.12-rc3 - 2021-10-16
  • 0.95.12-rc2 - 2021-10-15
  • 0.95.12-rc1 - 2021-10-15
  • 0.95.11 - 2021-09-03
  • 0.95.10 - 2021-08-20
  • 0.95.9 - 2021-07-31
  • 0.95.8 - 2021-07-25
  • 0.95.7 - 2021-07-10
  • 0.95.6 - 2021-05-17
  • 0.95.5 - 2021-05-11
  • 0.95.4 - 2021-03-26
  • 0.95.3 - 2021-03-25
  • 0.95.2 - 2021-03-11
  • 0.95.1 - 2021-03-04
  • 0.95.0 - 2021-03-03
  • 0.95.0-next3 - 2021-02-18
  • 0.95.0-next2 - 2021-02-15
  • 0.95.0-next1 - 2021-02-08
  • 0.21.21 - 2021-08-10
  • 0.21.20 - 2021-08-07
  • 0.21.19 - 2021-03-02
  • 0.21.18 - 2021-02-22
  • 0.21.17 - 2021-01-30
  • 0.21.16 - 2021-01-17
  • 0.21.15 - 2020-12-26
  • 0.21.14 - 2020-12-18
  • 0.21.13 - 2020-12-11
  • 0.21.12 - 2020-11-02
  • 0.21.11 - 2020-11-01
  • 0.21.10 - 2020-10-31
  • 0.21.9 - 2020-10-29
  • 0.21.8 - 2020-10-27
  • 0.21.7 - 2020-10-25
  • 0.21.6 - 2020-09-27
  • 0.21.5 - 2020-08-17
  • 0.21.5-next2 - 2020-08-16
  • 0.21.5-next1 - 2020-08-15
  • 0.21.4 - 2020-08-10
  • 0.21.3 - 2020-08-08
  • 0.21.2 - 2020-07-09
  • 0.21.1 - 2020-04-27
  • 0.21.0 - 2020-04-18
  • 0.20.15 - 2020-04-15
  • 0.20.14 - 2020-04-14
  • 0.20.13 - 2020-03-23
from knex GitHub release notes
Commit messages
Package name: knex
  • 380cebe Prepare to release 0.95.15
  • 6ef4645 Insert lock row fix during migration (#4865)
  • 54934ba Prepare to release 0.95.14
  • 337178f Mysql2 validate connection fix #4794 (#4812)
  • 29ac476 Prepare to release 0.95.13
  • 0f4356a Allow string indexType in index creation (#4791) (#4792)
  • 4e2bbe8 Zero precision in timestamp/datetime #4784 (#4788)
  • 89d3c69 Prepare to release 0.95.12
  • 63dbd65 Prepare to release 0.95.12-rc6
  • 50cfa5f Add geometry column building (#4776)
  • 994cbcb Bump typescript from 4.4.3 to 4.4.4 (#4731)
  • 3331e38 Bump tsd from 0.17.0 to 0.18.0 (#4732)
  • 336691f Prepare to release rc5
  • ace439d Implement partial index support (#4768)
  • 821e849 Merge remote-tracking branch 'origin/master'
  • f49b093 Bump dtslint from 4.1.6 to 4.2.0 (#4763)
  • ac5a619 Move migration tests to integration2
  • 33cea90 Try to fix coverage task
  • 6840d3f feat(cockroachdb): add support upsert (#4767)
  • a17cc32 Support SELECT .. FOR NO KEY UPDATE / KEY SHARE row level locking clauses in Postgres (#4755)
  • 58de7a9 fix(typings): table builder some methods return wrong types (#4764)
  • e991090 Bump eslint from 7.32.0 to 8.0.1 (#4736)
  • d463284 Add storage engine index Type support to MySQL index() and unique() schema (#4756)
  • 792d3be Bump version to rc4

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

@snyk-bot
fix: upgrade knex from 0.20.13 to 0.95.15
a4b5c24 
Snyk has created this PR to upgrade knex from 0.20.13 to 0.95.15.

See this package in npm:
knex

See this project in Snyk:
https://app.snyk.io/org/deniavsa/project/14601380-d560-45ee-a2ca-b35673f82359?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@deniavsa @snyk-bot