Skip to content

[Snyk] Security upgrade validator from 5.7.0 to 9.4.1#1

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-27ef7fbebbba495a5530bedd14318eb0
Open

[Snyk] Security upgrade validator from 5.7.0 to 9.4.1#1
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-27ef7fbebbba495a5530bedd14318eb0

Conversation

@snyk-bot
Copy link
Copy Markdown
Contributor

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
low severity Regular Expression Denial of Service (ReDoS)
npm:validator:20180218
Yes Proof of Concept
Commit messages
Package name: validator The new version differs by 250 commits.
  • 748d499 9.4.1
  • 1950835 Patch a REDOS
  • 77ed1ed Update the changelog and min version
  • 5c4c971 Merge pull request #788 from malachiwa/patch-1
  • 6a91b75 Update Israel's prefixes of mobile phone numbers
  • c93cf2c Merge pull request #786 from amilajack/patch-1
  • eeba049 Run against node 8
  • 4e455d2 9.4.0
  • 4fb34e9 Re-add the change to the en-IN phone regex
  • f2b9806 Updates from the previous merge
  • ca20e91 Merge pull request #785 from geekguy/master
  • f51344f Indian mobile numbers can start with 6 now.
  • 0ccb1c7 Update the changelog and min version
  • e7b8557 Merge pull request #769 from ProfNandaa/feat-741-is-phone-number-cc
  • 5615a12 isMobilePhone: add option for strictMode
  • ca0f25f 9.3.0
  • e9a4009 Remove the leftover compiled isDate
  • bf46b58 Update the changelog and min version
  • 06d6b16 Merge pull request #774 from vetoshko/new-phones
  • 3920f9d Merge branch 'master' into new-phones
  • f5fcb6d Merge pull request #777 from athivvat/support-thailand-locale
  • cbea0c7 Merge branch 'master' into support-thailand-locale
  • ab898d5 Merge pull request #779 from aniham/master
  • cfca110 Merge branch 'master' into master

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:validator:20180218
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant