Skip to content

[Snyk] Security upgrade npm from 6.14.5 to 6.14.6#719

Merged
ShayNehmad merged 6 commits intodevelopfrom
snyk-fix-661b0a9571c71708f17fef5d173a39ea
Jul 16, 2020
Merged

[Snyk] Security upgrade npm from 6.14.5 to 6.14.6#719
ShayNehmad merged 6 commits intodevelopfrom
snyk-fix-661b0a9571c71708f17fef5d173a39ea

Conversation

@snyk-bot
Copy link
Contributor

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • monkey/monkey_island/cc/ui/package.json
    • monkey/monkey_island/cc/ui/package-lock.json
    • monkey/monkey_island/cc/ui/.snyk

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Insertion of Sensitive Information into Log File
SNYK-JS-NPM-575435
No No Known Exploit
Commit messages
Package name: npm The new version differs by 13 commits.
  • 66092d5 6.14.6
  • 46e91d9 update AUTHORS
  • 66aab41 docs: changelog for 6.14.6
  • 94eca63 npm-registry-fetch@4.0.5
  • a9857b8 chore: remove auth info from logs
  • 479e45c style: fix lint error with no trailing comma
  • 1aec4cb test: add test for `npm doctor` that ping registry returns error
  • b7ad775 fix: wrong `npm doctor` command result
  • 9a2e2e7 docs: Fix typo
  • c49b6ae spdx-license-ids@3.0.5
  • 3dd429e docs: Add note about dropped `*` filenames
  • 0ca3509 Update npm-link.md
  • 2e05298 chore(docs): fixed links to cli commands

See the full diff

With a Snyk patch:
Severity Issue Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-LODASH-567746
Proof of Concept

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

snyk-bot and others added 3 commits July 14, 2020 15:09
…/ui/package-lock.json & monkey/monkey_island/cc/ui/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NPM-575435 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746
@ShayNehmad
Copy link
Contributor

Tested manually, it works on my machine

@codecov
Copy link

codecov bot commented Jul 16, 2020

Codecov Report

Merging #719 into develop will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@ Coverage Diff @@ ## develop #719 +/- ## ======================================== Coverage 59.85% 59.85% ======================================== Files 147 147 Lines 4783 4783 ======================================== Hits 2863 2863 Misses 1920 1920 

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5fd1128...4dfdd44. Read the comment docs.

npm audit fix + lock to correct versions
@ShayNehmad ShayNehmad merged commit b0251fb into develop Jul 16, 2020
@ShayNehmad ShayNehmad deleted the snyk-fix-661b0a9571c71708f17fef5d173a39ea branch July 16, 2020 11:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants