Skip to content

[Snyk] Upgrade tar-stream from 2.2.0 to 3.1.7#4

Open
Graysonbarton wants to merge 1 commit intomainfrom
snyk-upgrade-471fdbce4b1e4bf0278a84bbd49875d5
Open

[Snyk] Upgrade tar-stream from 2.2.0 to 3.1.7#4
Graysonbarton wants to merge 1 commit intomainfrom
snyk-upgrade-471fdbce4b1e4bf0278a84bbd49875d5

Conversation

@Graysonbarton
Copy link
Copy Markdown
Owner

@Graysonbarton Graysonbarton commented Oct 31, 2024

snyk-top-banner

Snyk has created this PR to upgrade tar-stream from 2.2.0 to 3.1.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 9 versions ahead of your current version.

  • The recommended version was released on 9 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860		 111 No Known Exploit
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727		 111 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 111 No Known Exploit
high severity Prototype Poisoning
SNYK-JS-QS-3153490		 111 Proof of Concept
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		 111 No Known Exploit
medium severity Unchecked Input for Loop Condition
SNYK-JS-KATEX-6483836		 111 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		 111 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106		 111 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060		 111 No Known Exploit
medium severity Open Redirect
SNYK-JS-EXPRESS-6474509		 111 No Known Exploit
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867		 111 No Known Exploit
medium severity Improper Encoding or Escaping of Output
SNYK-JS-KATEX-6483831		 111 No Known Exploit
medium severity Incomplete List of Disallowed Inputs
SNYK-JS-KATEX-6483834		 111 No Known Exploit
medium severity Unchecked Input for Loop Condition
SNYK-JS-KATEX-6483835		 111 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973		 111 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SEND-7926862		 111 No Known Exploit
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865		 111 No Known Exploit
Release notes
Package name: tar-stream from tar-stream GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
feat: upgrade tar-stream from 2.2.0 to 3.1.7
a8767f5 
Snyk has created this PR to upgrade tar-stream from 2.2.0 to 3.1.7.

See this package in npm:
tar-stream

See this project in Snyk:
https://app.snyk.io/org/graysonbarton/project/f1fbae4f-be7f-4a93-9123-56a14c0fdb2e?utm_source=github&utm_medium=referral&page=upgrade-pr
@sourcery-ai
Copy link
Copy Markdown

sourcery-ai bot commented Oct 31, 2024 •
edited
Loading

🧙 Sourcery has finished reviewing your pull request!

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time. You can also use
    this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

sourcery-ai[bot]
sourcery-ai bot reviewed Oct 31, 2024
View reviewed changes
Copy link
Copy Markdown

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sourcery-ai sourcery-ai[bot] sourcery-ai[bot] left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Graysonbarton @snyk-bot