GitHub
10/15/2024, 5:28 AMnpm dependencies of this project.
Changes included in this PR
• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
• package.json
• package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------ | --------------- | ---------------- |
| [[medium severity](https://camo.githubusercontent.com/c901cdb10f1d2870c22d8bb9f8dedf8c9c044d596e6feaf497b4df54be81fbfd/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f775f32302c685f32302f76313536313937373831392f69636f6e2f6d2e706e67 "medium severity")](https://camo.githubusercontent.com/c901cdb10f1d2870c22d8bb9f8dedf8c9c044d596e6feaf497b4df54be81fbfd/68747470733a2f2f7265732e636c6f7564696e6172792e636f6d2f736e796b2f696d6167652f75706c6f61642f775f32302c685f32302f76313536313937373831392f69636f6e2f6d2e706e67) | 601/1000 Why? Recently disclosed, Has a fix available, CVSS 6.3 | Cross-site Scripting (XSS) [SNYK-JS-COOKIE-8163060](https://snyk.io/vuln/SNYK-JS-COOKIE-8163060) | No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: express The new version differs by 2 commits.
• 8e229f9 4.21.1
• a024c8a fix(deps): cookie@0.7.1
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
---
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: https://camo.githubusercontent.com/49843be311b769922186ad0001d369f4122f13f2f3b0d2e504689d84fce5a48c/68747470733a2f2f6170692e7365676d656e742e696f2f76312f706978656c2f747261636b3f646174613d65794a33636d6c305a55746c65534936496e4a79576d785a634564485932527954485a7362306c596430645563566734576b4652546e4e434f5545774969776959573576626e6c746233567a535751694f6949304e7a41304f5749305a69307a4d446c694c5451325a445174596a46685a5330775a6a41304e6a5668597a6b794d3259694c434a6c646d567564434936496c425349485a705a58646c5a434973496e42796233426c636e52705a584d694f6e736963484a4a5a434936496a51334d445135596a526d4c544d774f5749744e445a6b4e4331694d57466c4c54426d4d4451324e57466a4f54497a5a694a3966513d3d
🧐 View latest project report
🛠️ Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
---
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Cross-site Scripting (XSS)
pact-foundation/pact-js
GitHub Actions: Test linux-musl-amd64-node-18
GitHub Actions: Test linux-musl-amd64-node-20
GitHub Actions: Test linux-musl-amd64-node-22
GitHub Actions: Test windows-latest--node-22
GitHub Actions: Test linux-musl-amd64-node-18
GitHub Actions: Test ubuntu-latest--node-22
GitHub Actions: Test linux-musl-amd64-node-20
GitHub Actions: Test macos-12--node-22
GitHub Actions: Test linux-musl-amd64-node-22
GitHub Actions: Test macos-14--node-22
GitHub Actions: Test windows-latest--node-22
GitHub Actions: Test windows-latest--node-20
GitHub Actions: Test ubuntu-latest--node-22
GitHub Actions: Test ubuntu-latest--node-20
GitHub Actions: Test macos-12--node-22
GitHub Actions: Test macos-12--node-20
GitHub Actions: Test macos-14--node-22
GitHub Actions: Test macos-14--node-20
GitHub Actions: Test windows-latest--node-20
GitHub Actions: Test windows-latest--node-18
✅ 10 other checks have passed
10/30 successful checksGitHub
11/14/2024, 5:23 PM