[Snyk] Security upgrade node-pre-gyp from 0.6.39 to 0.9.0 by jmatsushita · Pull Request #16 · contentascode/nodegit
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
584/1000 Why? Has a fix available, CVSS 7.4 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-HAWK-2808852 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: node-pre-gyp
The new version differs by 42 commits.- 13c5ad0 bump to v0.9.0
- 07e7ee5 Merge pull request WIP: Refactor publishing nodegit/nodegit#350 from cktang88/master
- 9a9089b Replace request with needle
- 2844fa4 bump to v0.8.0 with N-API support
- b22612c remove node-pre-gyp dep from app7 package.json
- 9bb97af Merge pull request Update dependency node-pre-gyp to ~0.6 nodegit/nodegit#345 from inspiredware/napi-support
- c31cce4 Merge branch 'master' into napi-support
- cf3ebb6 bump to v0.7.1 with tar v4.x
- 9bc1ff3 avoid double declare of tape in devDeps
- b1ce220 fix package.json syntax
- e9fb2e5 Merge pull request Module fails to load nodegit/nodegit#299 from isaacs/master
- 81f2e60 Merge branch 'master' into master
- e7bb6cd bump to v0.7.0 / drop node v0.10.x support
- 837c48b update versions
- af507d1 Merge pull request Added checkout head method and tests nodegit/nodegit#347 from krotscheck/hawk
- eda90e0 Remove dependency on hawk, upgrade request
- 9684ef6 Another CI build tweak
- 9870491 Addresses CI build errors
- b2ed35a update with latest versions
- e352a05 kick travis
- 37eb637 bump to v0.6.40
- 8f7c497 CI tweaks
- 488ac7b Fix for code cleanup
- 82a641e Code cleanup.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.