Skip to content

[Snyk] Fix for 1 vulnerabilities - #3

Open
twilio-product-security wants to merge 2 commits into
mainfrom
snyk-fix-c4c82cb1e23b266da1cdc6269b0f0cbe
Open

[Snyk] Fix for 1 vulnerabilities#3
twilio-product-security wants to merge 2 commits into
mainfrom
snyk-fix-c4c82cb1e23b266da1cdc6269b0f0cbe

Conversation

@twilio-product-security

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-1579269
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: twilio The new version differs by 66 commits.
  • 97f60c8 Release 3.54.2
  • 8c0898c [Librarian] Regenerated @ 15a74dddee9e2bba5fb0d673b5288e65d4ab3201
  • 9a7da3e chore: update template files
  • c226431 fix: url encoding for validateExpressRequest (#642)
  • 10fa1ec fix: axios update to v0.21.1 (#640)
  • bf4a89a Update .travis.yml
  • c270737 Update .travis.yml
  • ae96ebe Release 3.54.1
  • 58e69a6 [Librarian] Regenerated @ 15a74dddee9e2bba5fb0d673b5288e65d4ab3201
  • 1cb33f1 Release 3.54.0
  • aab9558 [Librarian] Regenerated @ 28cbb7d771677c50c64003cc2c5afc660ccc6fa3
  • a39b111 Release 3.53.0
  • 221fba8 [Librarian] Regenerated @ 0604d0d9a213f39954083b366c3fc667d22d702e
  • afec144 Release 3.52.0
  • 42ee8d3 [Librarian] Regenerated @ 146e53875c8c04da5a6c73f65aa5011ad65b2dfd
  • 4f2b4f9 chore: Move @ types dependencies to peerDependencies (#630)
  • 5289971 Release 3.51.0
  • 021203d [Librarian] Regenerated @ 551da0c03315c2791ce53816c329fd1fb37f471f
  • 528fc25 fix: X-Twilio-Signature validation when URL query parameters contain @ or : (#621)
  • 90f4c46 chore: update badge
  • a128488 feat: add regional twr header in the access token (#623)
  • 5a10bfd fix: remove request auth headers from debug logging (#622)
  • d1157f2 chore: pin jasmine for compatibility with older node versions (#625)
  • 0d5ff50 chore: update template files

See the full diff

Package name: twilio-run The new version differs by 10 commits.
  • b8ed507 chore(release): 2.8.0
  • 8f0eb3e chore(deps-dev): bump standard-version from 6.0.1 to 8.0.1
  • d682b2d fix: upgrade type-fest from 0.6.0 to 0.15.1
  • 1ad9516 refactor: update serverless-api to v4
  • 758d026 test(env): fix env tests
  • c8e327b fix(env): catch dotenv parsing error
  • 39d34a4 chore(deps-dev): update jest
  • 98d829d ci(actions): enable actions on push
  • e318d2b chore(release): 2.8.0-beta.0
  • fa0d973 docs: improves the usage section of the README (#151)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants