Skip to content

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 520/1000
Why? Has a fix available, CVSS 5.9
Regular Expression Denial of Service (ReDoS )
SNYK-JS-MARKED-584281
No No Known Exploit
low severity 486/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.3
Arbitrary Code Injection
SNYK-JS-UNDERSCORE-1080984
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: jsdoc The new version differs by 121 commits.
  • e1f1919 3.6.7
  • f7a64bd chore(deps): update selected dependencies
  • 3f5c462 3.6.6
  • 95e3192 fix: correctly track interface members
  • ef05a69 3.6.5
  • a59b5cd fix: prevent circular refs when params have the same type expression
  • 8d0fce6 chore: bump version; update release notes
  • 91c9aa7 chore(deps): update dependencies
  • ef33f07 3.6.3
  • 0e468af 3.6.2
  • d5e0eb0 Add 3.6.2 changelog.
  • 61ae11c Ensure that ES 2015 classes appear in the generated docs when they're supposed to. (#1644)
  • 03b8abd Add 3.6.1 changelog.
  • 0645930 3.6.1
  • bac40ab Parse type applications correctly in Node.js 12. (#1643)
  • e5919e4 Update .gitignore.
  • 2099e72 3.6.0
  • d45c5b8 Add 3.6.0 changelog.
  • b8012f4 Update dependencies, plus the URLs for the GitHub repos and docs.
  • 10c004f update docs with new template (#1604)
  • aa0b6c1 switch to new-ish ECMAScript syntax
  • 1546d40 update ESLint config
  • 27f9a33 migrate from `babylon` to `@ babel/parser`
  • d310908 Update ajv to the latest version 🚀 (#1599)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant