Skip to content

[Snyk] Security upgrade jsdoc from 3.5.5 to 3.6.7#8

Open
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-37c8ddb62e25d9bfba93dad443b5a620
Open

[Snyk] Security upgrade jsdoc from 3.5.5 to 3.6.7#8
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-37c8ddb62e25d9bfba93dad443b5a620

Conversation

@snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 520/1000
Why? Has a fix available, CVSS 5.9
Regular Expression Denial of Service (ReDoS )
SNYK-JS-MARKED-584281
No No Known Exploit
low severity 486/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.3
Arbitrary Code Injection
SNYK-JS-UNDERSCORE-1080984
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: jsdoc The new version differs by 121 commits.
  • e1f1919 3.6.7
  • f7a64bd chore(deps): update selected dependencies
  • 3f5c462 3.6.6
  • 95e3192 fix: correctly track interface members
  • ef05a69 3.6.5
  • a59b5cd fix: prevent circular refs when params have the same type expression
  • 8d0fce6 chore: bump version; update release notes
  • 91c9aa7 chore(deps): update dependencies
  • ef33f07 3.6.3
  • 0e468af 3.6.2
  • d5e0eb0 Add 3.6.2 changelog.
  • 61ae11c Ensure that ES 2015 classes appear in the generated docs when they're supposed to. (#1644)
  • 03b8abd Add 3.6.1 changelog.
  • 0645930 3.6.1
  • bac40ab Parse type applications correctly in Node.js 12. (#1643)
  • e5919e4 Update .gitignore.
  • 2099e72 3.6.0
  • d45c5b8 Add 3.6.0 changelog.
  • b8012f4 Update dependencies, plus the URLs for the GitHub repos and docs.
  • 10c004f update docs with new template (#1604)
  • aa0b6c1 switch to new-ish ECMAScript syntax
  • 1546d40 update ESLint config
  • 27f9a33 migrate from `babylon` to `@ babel/parser`
  • d310908 Update ajv to the latest version 🚀 (#1599)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant