Skip to content
This repository has been archived by the owner on Feb 6, 2023. It is now read-only.

[Snyk] Security upgrade node-hid from 0.5.4 to 0.5.5 #11

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • dapp/package.json
    • dapp/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 481/1000
Why? Recently disclosed, Has a fix available, CVSS 3.7
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: node-hid The new version differs by 43 commits.
  • ec24a3d version to 0.5.5
  • 7919fb7 travis config fix again sigh2
  • f5e1f5b travis config fix again sigh
  • e20c451 travis config fix again sigh
  • 8339942 travis config fix again
  • 09ea5d6 travis config x86 enable try again
  • 6c9bd11 travis config x86 enable try again
  • 1d0ae87 travis config x86 enable
  • bbbb70c travis config x86 enable
  • c603748 travis config matching to node-serialport
  • b34f0e5 trying to fix travis x86 build
  • a370021 add prebuild_upload env var
  • 1f21738 fix some deprecation warnings in NAN C code
  • e3dadba set beta
  • f26afa0 appveyor and travis cleanup
  • 8791a1a simple test script added
  • 3803cea fix error type
  • 78c7d4c more blatant appveyor and travis config copying from node-serialport, because their stuff is great
  • e9159ea prelim docs about move to prebuild from node-pre-gyp
  • 86ed480 fix rebuild and add prebuild-upload
  • 7a4835d cleanup appveyor for prebuild
  • 2c9afee apparently npmignore is a thing now
  • f44e960 Migrate from node-pre-gyp to prebuild and bindings, yay!
  • 3b83233 do not kill node process at init/exit, issue 1.4.0 Release gnosis/MultiSigWallet#217

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

Successfully merging this pull request may close these issues.

1 participant