Skip to content

Conversation

@snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-FASTCSV-1049538
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: fast-csv The new version differs by 250 commits.
  • 3dc859e chore(release): publish v4.3.6
  • 4bbd39f fix: Simplify empty row check by removing complex regex
  • 1d18b89 chore(deps): update dependency eslint-plugin-tsdoc to v0.2.10
  • 6101e60 chore(deps): update dependency eslint-plugin-prettier to v3.2.0
  • 864e5cf chore(deps): update dependency eslint-plugin-tsdoc to v0.2.9
  • e04342f chore(deps): update dependency @ types/jest to v26.0.16
  • ef3d802 chore(deps): update typescript-eslint monorepo to v4.9.0
  • 5c35dbc chore(deps): update dependency eslint-plugin-tsdoc to v0.2.8
  • 3540be6 chore(deps): update dependency prettier to v2.2.1
  • a6befe2 chore(deps): update dependency @ types/sinon to v9.0.9
  • f7e1236 chore(deps): update typescript-eslint monorepo to v4.8.2
  • b69808b chore(deps): update dependency eslint to v7.14.0
  • 9af7a41 fix(deps): update dependency @ types/yargs to v15.0.10
  • 057a4da fix(deps): update dependency yargs to v16.1.1
  • 5f2a15a chore(deps): update dependency prettier to v2.2.0
  • 979cfcf chore(deps): update typescript-eslint monorepo to v4.8.1
  • 97a0cc5 chore(deps): update typescript-eslint monorepo to v4.8.0
  • fb7f92d chore(deps): update dependency eslint-plugin-jest to v24.1.3
  • 3bf2919 chore(deps): update dependency eslint-plugin-jest to v24.1.2
  • 35fcaf9 chore(deps): update dependency eslint-plugin-jest to v24.1.1
  • b03b546 chore(deps): update typescript-eslint monorepo to v4.7.0
  • d1aa33e chore(deps): update dependency ts-jest to v26.4.4
  • df5c4fe chore(deps): update dependency eslint to v7.13.0
  • 051d143 chore(deps): update dependency jest to v26.6.3

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-FASTCSV-1049538
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants