[Snyk] Fix for 1 vulnerabilities #29

Omrisnyk · 2023-11-30T18:09:04Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	125/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.08, Score Version: V5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: express-fileupload

0.2.0 - 2017-08-28
Breaking Changes
- Support for Node.js v6 and above. No longer supporting versions of Node older than 6
- .mv() now returns a Promise when callback argument is not provided
New Features
- Promise returned in .mv() (#42) (9bf6e61)
0.1.4 - 2017-06-30
Bugfixes
- #36 Add error handlers for parser errors (0713f6f) @ dries
0.1.3 - 2017-04-30
Bugfixes
- #21 safeFileName: Extensions are unexpectedly stripped out
New Features
- preserveExtension (PR #27) (8f599b4) @ pronein
- fix readme (PR #26) (63c759a) @ cactucs
0.1.2 - 2017-03-09
Bugfixes
- #16 Upload Large file
New Features
- Improve performance for large files (PR #22) (e23f337) @ targos
0.1.1 - 2017-02-18
Breaking Changes

Breaking Change 1.) No more urlencoded support

As of v0.1.0, there is NO MORE application/x-www-form-urlencoded SUPPORT! Moving forward, express-fileupload is considered a "multipart" solution only. If you want to parse urlencoded requests, use body-parser.

Breaking Change 2.) Support for Node v4.x.x and above now

Usage with Node <4 is no longer supported. Use at your own risk.

Bugfixes
- #6 Crashes when multipart request is empty (3d72084)
- #9 & #11 body-parser interferes with express-fileupload and vice versa (92d7ad5)
- #19 TypeError: callback is not a function (df3df26)
New Features
- Unit testing and test coverage. Addresses #5 (266c10d)
- Field array parsing (PR #20)
0.1.0 - 2017-02-18
markdown update
0.0.7 - 2017-02-10
Bugfixes
- #17 multiple input file input doesn't work (ec6270d)
0.0.6 - 2017-01-14
Bugfixes
- #14 empty file input results in file object with empty buffer. @ r3wt (10e90ff)
New Features
- Better documentation. Addresses #10 (eb7f3ab)
- Better documentation. Addresses #12 (a1090b8)
- New option: safeFileNames. Addresses #13 (06da130)
0.0.5 - 2016-04-22

from express-fileupload GitHub release notes

Package name: tap

18.0.0 - 2023-09-15
18.0.0-26 - 2023-09-13
18.0.0-25 - 2023-09-10
18.0.0-24 - 2023-09-05
18.0.0-23 - 2023-09-03
18.0.0-22 - 2023-09-01
18.0.0-21 - 2023-08-29
18.0.0-20 - 2023-08-27
18.0.0-19 - 2023-08-21
18.0.0-18 - 2023-08-20
18.0.0-17 - 2023-08-18
18.0.0-16 - 2023-08-17
18.0.0-15 - 2023-08-15
18.0.0-14 - 2023-08-12
18.0.0-13 - 2023-08-09
18.0.0-12 - 2023-08-07
18.0.0-11 - 2023-08-07
18.0.0-10 - 2023-08-07
18.0.0-9 - 2023-08-07
18.0.0-8 - 2023-08-07
18.0.0-7 - 2023-08-07
18.0.0-6 - 2023-08-06
18.0.0-5 - 2023-08-06
18.0.0-4 - 2023-08-04
18.0.0-3 - 2023-08-04
18.0.0-2 - 2023-08-04
18.0.0-1 - 2023-08-04
16.3.9 - 2023-09-27
16.3.8 - 2023-07-30
16.3.7 - 2023-06-22
16.3.6 - 2023-06-04
16.3.5 - 2023-06-04
16.3.4 - 2023-01-16
16.3.3 - 2023-01-09
16.3.2 - 2022-11-16
16.3.1 - 2022-11-13
16.3.0 - 2022-06-17
16.2.0 - 2022-05-04
16.1.0 - 2022-04-25
16.0.1 - 2022-03-22
16.0.0 - 2022-03-05
15.2.3 - 2022-03-05
15.2.2 - 2022-03-05
15.2.1 - 2022-03-05
15.2.0 - 2022-03-05
15.1.6 - 2022-01-04
15.1.5 - 2021-11-26
15.1.4 - 2021-11-26
15.1.3 - 2021-11-26
15.1.2 - 2021-11-18
15.1.1 - 2021-11-17
15.1.0 - 2021-11-16
15.0.10 - 2021-09-21
15.0.9 - 2021-05-07
15.0.8 - 2021-05-07
15.0.7 - 2021-05-06
15.0.6 - 2021-04-29
15.0.5 - 2021-04-24
15.0.4 - 2021-04-20
15.0.3 - 2021-04-20
15.0.2 - 2021-04-05
15.0.1 - 2021-04-01
15.0.0 - 2021-03-31
15.0.0-3 - 2021-03-26
15.0.0-2 - 2021-02-23
15.0.0-1 - 2021-02-18
15.0.0-0 - 2021-02-17
14.11.0 - 2020-11-16
14.10.8 - 2020-07-21
14.10.7 - 2020-03-20
14.10.6 - 2020-01-14
14.10.5 - 2019-12-18
14.10.4 - 2019-12-16
14.10.3 - 2019-12-16
14.10.2 - 2019-11-25
14.10.2-unbundled - 2019-11-26
14.10.2-totally-bundled.1 - 2019-11-27
14.10.2-totally-bundled - 2019-11-27
14.10.1 - 2019-11-21
14.10.0 - 2019-11-21
14.9.2 - 2019-11-06
14.9.1 - 2019-10-30
14.9.0 - 2019-10-30
14.8.3 - 2019-10-30
14.8.2 - 2019-10-22
14.8.1 - 2019-10-22
14.8.0 - 2019-10-21
14.7.3 - 2019-10-20
14.7.2 - 2019-10-18
14.7.1 - 2019-10-16
14.7.0 - 2019-10-14
14.6.9 - 2019-09-30
14.6.8 - 2019-09-30
14.6.7 - 2019-09-29
14.6.6 - 2019-09-29
14.6.5 - 2019-09-23
14.6.4 - 2019-09-15
14.6.3 - 2019-09-15
14.6.2 - 2019-09-10
14.6.1 - 2019-08-04
14.6.0 - 2019-08-04
14.5.0 - 2019-07-28
14.4.3 - 2019-07-22
14.4.2 - 2019-07-17
14.4.1 - 2019-07-03
14.4.0 - 2019-07-02
14.3.1 - 2019-06-25
14.3.0 - 2019-06-25
14.2.5 - 2019-06-22
14.2.4 - 2019-06-19
14.2.3 - 2019-06-14
14.2.2 - 2019-06-05
14.2.1 - 2019-06-04
14.2.0 - 2019-05-28
14.1.11 - 2019-05-24
14.1.10 - 2019-05-23
14.1.9 - 2019-05-23
14.1.8 - 2019-05-23
14.1.7 - 2019-05-22
14.1.6 - 2019-05-22
14.1.5 - 2019-05-22
14.1.4 - 2019-05-22
14.1.3 - 2019-05-21
14.1.2 - 2019-05-21
14.1.1 - 2019-05-20
14.1.0 - 2019-05-20
14.0.0 - 2019-05-18
13.1.11 - 2019-05-17
13.1.10 - 2019-05-17
13.1.9 - 2019-05-14
13.1.8 - 2019-05-11
13.1.7 - 2019-05-10
13.1.6 - 2019-05-09
13.1.5 - 2019-05-08
13.1.4 - 2019-05-08
13.1.3 - 2019-05-08
13.1.2 - 2019-05-01
13.1.1 - 2019-04-29
13.1.0 - 2019-04-28
13.0.4 - 2019-04-27
13.0.3 - 2019-04-26
13.0.1 - 2019-04-26
13.0.0 - 2019-04-26
13.0.0-rc.30 - 2019-04-24
13.0.0-rc.29 - 2019-04-24
13.0.0-rc.28 - 2019-04-24
13.0.0-rc.27 - 2019-04-24
13.0.0-rc.26 - 2019-04-24
13.0.0-rc.25 - 2019-04-20
13.0.0-rc.24 - 2019-04-17
13.0.0-rc.23 - 2019-04-06
13.0.0-rc.22 - 2019-04-06
13.0.0-rc.21 - 2019-04-06
13.0.0-rc.20 - 2019-03-31
13.0.0-rc.19 - 2019-03-29
13.0.0-rc.18 - 2019-03-26
13.0.0-rc.17 - 2019-03-26
13.0.0-rc.16 - 2019-03-25
13.0.0-rc.15 - 2019-03-25
13.0.0-rc.14 - 2019-03-22
13.0.0-rc.13 - 2019-03-22
13.0.0-rc.12 - 2019-03-21
13.0.0-rc.11 - 2019-03-20
13.0.0-rc.10 - 2019-03-18
13.0.0-rc.9 - 2019-03-18
13.0.0-rc.8 - 2019-03-18
13.0.0-rc.7 - 2019-03-17
13.0.0-rc.6 - 2019-03-17
13.0.0-rc.5 - 2019-03-16
13.0.0-rc.4 - 2019-03-16
13.0.0-rc.3 - 2019-03-13
13.0.0-rc.2 - 2019-03-13
13.0.0-rc.1 - 2019-03-11
13.0.0-rc.0 - 2019-03-11
12.7.0 - 2019-04-28
12.6.6 - 2019-04-26
12.6.5 - 2019-04-24
12.6.4 - 2019-04-24
12.6.3 - 2019-04-22
12.6.2 - 2019-04-17
12.6.1 - 2019-03-22
12.6.0 - 2019-03-07
12.5.3 - 2019-02-15
12.5.2 - 2019-02-08
12.5.1 - 2019-02-01
12.5.0 - 2019-01-30
12.4.1 - 2019-01-30
12.4.0 - 2019-01-23
12.3.0 - 2019-01-23
12.2.1 - 2019-01-23
12.2.0 - 2019-01-23
12.1.4 - 2019-01-22
12.1.3 - 2019-01-22
12.1.2 - 2019-01-21
12.1.1 - 2018-12-12
12.1.0 - 2018-11-13
12.0.2 - 2018-11-12
12.0.1 - 2018-05-17
12.0.0 - 2018-05-17
11.1.5 - 2018-05-09
11.1.4 - 2018-04-13
11.1.3 - 2018-03-20
11.1.2 - 2018-03-07
11.1.1 - 2018-02-19
11.1.0 - 2018-01-30
11.0.1 - 2017-12-21
11.0.0 - 2017-11-26
11.0.0-rc.3 - 2017-11-21
11.0.0-rc.2 - 2017-11-20
11.0.0-rc.1 - 2017-11-20
11.0.0-rc.0 - 2017-11-20
10.7.3 - 2017-11-07
10.7.2 - 2017-08-12
10.7.1 - 2017-08-01
10.7.0 - 2017-06-25
10.6.0 - 2017-06-24
10.5.2 - 2017-06-22
10.5.1 - 2017-06-20
10.5.0 - 2017-06-20
10.4.0 - 2017-06-18
10.3.4 - 2017-06-16
10.3.3 - 2017-06-02
10.3.2 - 2017-04-09
10.3.1 - 2017-03-29
10.3.0 - 2017-03-02
10.2.2 - 2017-02-27
10.2.1 - 2017-02-23
10.2.0 - 2017-02-19
10.1.2 - 2017-02-18
10.1.1 - 2017-02-14
10.1.0 - 2017-02-07
10.0.2 - 2017-02-02
10.0.1 - 2017-02-02
10.0.0 - 2017-01-28
9.0.3 - 2017-01-09
9.0.2 - 2017-01-09
9.0.1 - 2017-01-08
9.0.0 - 2017-01-08
8.0.1 - 2016-11-17
8.0.0 - 2016-10-25
7.1.2 - 2016-09-09
7.1.1 - 2016-09-08
7.1.0 - 2016-09-07
7.0.1 - 2016-09-06
7.0.0 - 2016-08-27
6.3.2 - 2016-08-11
6.3.0 - 2016-07-31
6.2.0 - 2016-07-15
6.1.1 - 2016-07-01
6.1.0 - 2016-07-01
6.0.0 - 2016-07-01
5.8.0 - 2016-06-24

from tap GitHub release notes

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116

fix: package.json & package-lock.json to reduce vulnerabilities

493c5ec

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Fix for 1 vulnerabilities #29

[Snyk] Fix for 1 vulnerabilities #29

Uh oh!

Omrisnyk commented Nov 30, 2023

Breaking Changes

New Features

Bugfixes

Bugfixes

New Features

Bugfixes

New Features

Breaking Changes

Breaking Change 1.) No more urlencoded support

Breaking Change 2.) Support for Node v4.x.x and above now

Bugfixes

New Features

Bugfixes

Bugfixes

New Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

[Snyk] Fix for 1 vulnerabilities #29

Are you sure you want to change the base?

[Snyk] Fix for 1 vulnerabilities #29

Uh oh!

Conversation

Omrisnyk commented Nov 30, 2023

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:

Breaking Changes

New Features

Bugfixes

Bugfixes

New Features

Bugfixes

New Features

Breaking Changes

Breaking Change 1.) No more urlencoded support

Breaking Change 2.) Support for Node v4.x.x and above now

Bugfixes

New Features

Bugfixes

Bugfixes

New Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants