Skip to content

[Snyk] Security upgrade noflo from 0.5.22 to 0.7.6#8

Open
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-74c4d3b944683b158e189d5fff9adb1c
Open

[Snyk] Security upgrade noflo from 0.5.22 to 0.7.6#8
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-74c4d3b944683b158e189d5fff9adb1c

Conversation

@snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 776/1000
Why? Recently disclosed, Has a fix available, CVSS 9.8
Prototype Pollution
SNYK-JS-LODASH-590103
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: noflo The new version differs by 225 commits.
  • 575ed20 Bump
  • 5cf44e2 Merge pull request #439 from noflo/greenkeeper-fbp-1.3.0
  • 18b6958 chore(package): update fbp to version 1.3.0
  • fdb05b3 Mention case sensitive mode
  • b1353fb Merge pull request #435 from ifitzpatrick/case-sensitive
  • 0c6b213 Disambiguation, refs #130
  • f0c0870 Add support for stream datatype in ports, fixes #130
  • 0572800 Merge pull request #440 from noflo/greenkeeper-fbp-manifest-0.1.8
  • 88ab4ce chore(package): update fbp-manifest to version 0.1.8
  • c890f61 Go to tilde
  • 9a85546 Don't shadow loader var
  • eb54d6c Update CHANGES
  • b574fca Fix component caching, fixes #427
  • 4ed31d8 Pass caseSensitive option to new Graph with an options object
  • 57bd943 Merge pull request #432 from noflo/greenkeeper-fbp-1.1.7
  • 378bc86 Merge pull request #436 from noflo/greenkeeper-mocha-2.5.2
  • 39a6104 No setMaxListeners on browser
  • f5d4560 chore(package): update mocha to version 2.5.2
  • c1f56f3 Allow arbitrary number of listeners
  • c1b9860 Add caseSensitive option to Graph object
  • 1fc70fe chore(package): update fbp to version 1.1.7
  • 55342d1 Merge pull request #428 from noflo/greenkeeper-babel-core-6.9.0
  • 8b92c7c Merge pull request #431 from noflo/greenkeeper-mocha-2.5.1
  • 6b26921 chore(package): update mocha to version 2.5.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-590103
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant