[Snyk] Fix for 5 vulnerabilities #135

snyk-bot · 2021-04-27T03:13:38Z

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json

Priority Score (*)	Issue	Breaking Change	Exploit Maturity
551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	Yes	No Known Exploit
551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	Yes	No Known Exploit
551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	Yes	No Known Exploit
551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	Yes	No Known Exploit
758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3	Access Restriction Bypass SNYK-JS-XMLHTTPREQUESTSSL-1255647	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: socket.io-client

The new version differs by 104 commits.

d28cde7 chore(release): 4.0.0
43613d1 fix(bundle): restore support for JS modules
6abfa1f feat: add autoUnref option
5902365 feat: add support for typed events
78ec5a6 chore(release): 3.1.2
83a65be chore: bump engine.io-client version
13b32b3 fix: restore support for web workers
311c5d1 chore(release): 3.1.1
7a0c2b5 fix: include the path in the manager ID
61afc5d fix: remove polyfill for process in the bundle
47f917a fix(typings): add return types and general-case overload signatures (#1440)
f02ab3b fix(typings): fix the type of the "query" option (#1439)
be81a2c chore: point towards the master branch for the CI badge
0a63a17 refactor: remove unused line
5529f34 chore(release): 3.1.0
5d9b4eb chore: bump socket.io-parser version
13e16b9 chore: bump engine.io-client version
fe97243 fix(typings): make Manager#opts public (#1437)
4922e39 docs: points towards the website
bcdd3be chore(release): 3.0.5
cf9fc35 chore: bump debug version
53c7374 fix: emit a connect_error event upon connection failure
b83f89c fix(typings): make sendBuffer and receiveBuffer public
8c08c5d refactor: remove global polyfill from webpack config

Package name: validator

The new version differs by 250 commits.

24b3fd3 13.6.1
b986f3d fix: ReDOS in isEmail and isHSL (#1651)
2a3a1c3 13.6.0
1fa0959 chore: add typeof utility (#1648)
cf403d0 fix(isMobilePhone): add Sierra Leone phone and fix Sri Lanka phone (#1558)
3f70b8e feat(isPassportNumber, isIBAN, isMobilePhone): add Mozambique locale (#1604)
05ceb18 isURL(): Allow URLs to have only a username in the userinfo subcomponent (#1644)
9ee1b6b fix(isMobilePhone): update china zh-CN locale (#1642)
b82f4f2 fix(docs): typo in README.md (#1640)
615547f feat(isMobilePhone): add Latvia lv-LV locale (#1638)
d006e08 fix(isMobilePhone): add support for new networks codes in GH (#1635)
c33fca6 fix(isISIN): optimization (#1633)
2ef84e4 fix(isIP): validator patterns for IPv4 and IPv6 RegExp formats (#1632)
67a200d feat(isPostalCode): add KR locale (#1628)
b65ddc5 fix: fix A-z ranges (#1625)
39830a9 feat: IR passport and identityCard, respect .gitignore files (#1595)
5d6db63 feat(isIPRange): add support for IP version 4 or 6 (#1594)
a31c116 fix: update isMobilePhone validation for en-SG (#1573)
63b6162 chore: add gitter chatroom badge (#1592)
bb0dba6 feat(isPassportNumber): add MY locale (#1574)
7989e5b feat(isLicensePlate): add support for pt-BR locale (#1588)
3c771e8 feat(pt-BR): tax id, passport and license plates (#1613)
418df05 fix(isMobilePhone): prevent allowing landline numbers in es-CO (#1623)
6262f62 chore: improving code coverage to 100% branches (#1624)