New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Security upgrade marked from 0.3.5 to 0.3.18 #53

Open

snyk-bot wants to merge 1 commit into master from snyk-fix-78e13831dbd0662fe268ad1b38f692c4

snyk-bot commented Sep 1, 2020

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	654/1000 Why? Has a fix available, CVSS 8.8	Cross-site Scripting (XSS) npm:marked:20150520	No	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Cross-site Scripting (XSS) npm:marked:20170112	No	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Cross-site Scripting (XSS) npm:marked:20170815	No	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:marked:20170907	No	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:marked:20180225	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: marked

The new version differs by 250 commits.

98c9d14 Update home page
5d5fa04 0.3.18
f886f40 Merge pull request #1147 from 8fold/update-badges
044683b Remove Authors ~Head
cceac77 Merge remote-tracking branch 'upstream/master' into update-badges
265d6c1 pre-commit
341d128 Merge branch 'master' into update-badges
eef9de4 Add /docs directory for GitHub Pages (#1138)
682b9c6 grammar
e3489ca Add marked mark maker badge
03d0ed0 [editorconfig]: All md files except in test use tab (#1111)
c22be25 Create CNAME for marked.js.org
35214c5 Add initial docs with logo
3e681a6 Move most of README.md to /docs/README.md
94b8b3e Move existing docs to /docs dir
2509660 Rename doc to docs
d4e7bb4 Code of conduct (#1094)
214468b Merge pull request #1121 from UziTech/jasmine
ad0585d Merge pull request #1122 from alextrastero/patch-1
e3a988c Fix usage links in README
ecbf4b0 Minor docs update for easier maintenance (#1116)
5768180 travis build stages (#1113)
9c6c13f fix tests
79325aa add tests

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


          fix: package.json & package-lock.json to reduce vulnerabilities

18b0d2f

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:marked:20150520
- https://snyk.io/vuln/npm:marked:20170112
- https://snyk.io/vuln/npm:marked:20170815
- https://snyk.io/vuln/npm:marked:20170907
- https://snyk.io/vuln/npm:marked:20180225

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet