Skip to content

[Snyk] Fix for 1 vulnerabilities #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

qmutz
Copy link
Owner

@qmutz qmutz commented Feb 11, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 823/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6
Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: libp2p The new version differs by 250 commits.
  • d6bb967 chore: release version v0.32.0
  • d48005b chore: update contributors
  • 67b97e3 chore: add migration guide to 0.32 (#957)
  • 664ba2d chore: release version v0.32.0-rc.0
  • 608564b chore: update contributors
  • af723b3 fix: do not allow dial to large number of multiaddrs (#954)
  • 13cf476 chore: update to new multiformats (#948)
  • 39b0358 chore: use libp2p-tcp with types (#952)
  • f7183e8 chore: release version v0.31.7
  • b9988ad chore: update contributors
  • b291bc0 fix: dialer leaking resources after stopping (#947)
  • 755eb90 chore: update gossipsub dep for example
  • afe0f85 chore: use node 16
  • 50f7f32 chore: update branch
  • 052aad4 chore: use node 15 in ci
  • 2c4b567 chore: restructure pubsub tests
  • 2a6a635 chore: remove ipfs-utils dep (#953)
  • cd152f1 chore: add secure websockets example (#930)
  • 2959794 chore: add more details on DHT configuration in CONFIGURATION.md (#951)
  • 2068c84 chore: configuration format fix
  • d8ba284 fix: chat example with new multiaddr (#946)
  • 869d35d chore: release version v0.31.6
  • d6540bf chore: update contributors
  • 478963a feat: keychain rotate passphrase (#944)

See the full diff

Package name: libp2p-webrtc-star The new version differs by 234 commits.
  • 590c5fc chore: release version v0.23.0
  • e88d63d chore: update contributors
  • e4360f2 chore: update deps (#365)
  • c629cc1 chore: release version v0.22.4
  • d01cd4a chore: update contributors
  • 441a34e chore: update deps and use socket.io server v4 (#362)
  • 4822c40 chore: release version v0.22.3
  • a046a72 chore: update contributors
  • 1076b5b chore: update ipfs-utils dep (#341)
  • f61c4a1 chore: remove unecessary async fn in test (#336)
  • 2eacc5f chore: release version v0.22.2
  • 4ccf5be chore: update contributors
  • 4c82721 chore: add err code for unknown signal server on dial (#335)
  • c780457 chore: release version v0.22.1
  • 68b206f chore: update contributors
  • 5b7b142 feat: support multiple listeners (#330)
  • 53cbde6 chore: release version v0.22.0
  • 35ea046 chore: update contributors
  • 44f4232 chore: update deps (#329)
  • f644b08 chore: release version v0.21.2
  • b8b3fd0 chore: update contributors
  • 8ef0358 chore(deps): bump err-code from 2.0.3 to 3.0.1 (#302)
  • aa9f08a chore: release version v0.21.1
  • 1f080b2 chore: update contributors

See the full diff

Package name: libp2p-websockets The new version differs by 87 commits.

See the full diff

Package name: mafmt The new version differs by 107 commits.

See the full diff

Package name: multiaddr The new version differs by 168 commits.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-IP-6240864
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants