Skip to content

[Snyk] Security upgrade noflo from 0.5.22 to 0.7.6#7

Open
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-7dc375daa267083356dcd028ff4947c0
Open

[Snyk] Security upgrade noflo from 0.5.22 to 0.7.6#7
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-7dc375daa267083356dcd028ff4947c0

Conversation

@snyk-bot
Copy link

@snyk-bot snyk-bot commented Jul 9, 2020

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-LODASH-567746
No Proof of Concept
Commit messages
Package name: noflo The new version differs by 225 commits.
  • 575ed20 Bump
  • 5cf44e2 Merge pull request #439 from noflo/greenkeeper-fbp-1.3.0
  • 18b6958 chore(package): update fbp to version 1.3.0
  • fdb05b3 Mention case sensitive mode
  • b1353fb Merge pull request #435 from ifitzpatrick/case-sensitive
  • 0c6b213 Disambiguation, refs #130
  • f0c0870 Add support for stream datatype in ports, fixes #130
  • 0572800 Merge pull request #440 from noflo/greenkeeper-fbp-manifest-0.1.8
  • 88ab4ce chore(package): update fbp-manifest to version 0.1.8
  • c890f61 Go to tilde
  • 9a85546 Don't shadow loader var
  • eb54d6c Update CHANGES
  • b574fca Fix component caching, fixes #427
  • 4ed31d8 Pass caseSensitive option to new Graph with an options object
  • 57bd943 Merge pull request #432 from noflo/greenkeeper-fbp-1.1.7
  • 378bc86 Merge pull request #436 from noflo/greenkeeper-mocha-2.5.2
  • 39a6104 No setMaxListeners on browser
  • f5d4560 chore(package): update mocha to version 2.5.2
  • c1f56f3 Allow arbitrary number of listeners
  • c1b9860 Add caseSensitive option to Graph object
  • 1fc70fe chore(package): update fbp to version 1.1.7
  • 55342d1 Merge pull request #428 from noflo/greenkeeper-babel-core-6.9.0
  • 8b92c7c Merge pull request #431 from noflo/greenkeeper-mocha-2.5.1
  • 6b26921 chore(package): update mocha to version 2.5.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant