Skip to content

[Snyk] Upgrade express from 4.17.1 to 4.21.2 - #70

Open
GLOBAL-FINTECH wants to merge 1 commit into
mainfrom
snyk-upgrade-8bf01ec10fcad0dd1e4fdb17b5716819
Open

[Snyk] Upgrade express from 4.17.1 to 4.21.2#70
GLOBAL-FINTECH wants to merge 1 commit into
mainfrom
snyk-upgrade-8bf01ec10fcad0dd1e4fdb17b5716819

Conversation

@GLOBAL-FINTECH

@GLOBAL-FINTECHGLOBAL-FINTECH commented Feb 27, 2025

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to upgrade express from 4.17.1 to 4.21.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 13 versions ahead of your current version.

  • The recommended version was released 3 months ago.

Issues fixed by the recommended upgrade:

IssueScoreExploit Maturity
high severityCode Injection
SNYK-JS-LODASH-1040724		586Proof of Concept
high severityDirectory Traversal
SNYK-JS-MOMENT-2440688		586No Known Exploit
high severitySQL Injection
SNYK-JS-SEQUELIZE-2959225		586No Known Exploit
high severityImproper Filtering of Special Elements
SNYK-JS-SEQUELIZE-3324088		586No Known Exploit
high severityAsymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860		586No Known Exploit
high severityPrototype Pollution
SNYK-JS-DOTTIE-3332763		586Proof of Concept
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238		586Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599		586Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601		586Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602		586Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		586Proof of Concept
medium severityInformation Exposure
SNYK-JS-SEQUELIZE-3324089		586No Known Exploit
medium severityAccess of Resource Using Incompatible Type ('Type Confusion')
SNYK-JS-SEQUELIZE-3324090		586No Known Exploit
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106		586Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-8482416		586Proof of Concept
medium severityCross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060		586No Known Exploit
medium severityOpen Redirect
SNYK-JS-EXPRESS-6474509		586No Known Exploit
medium severityCross-site Scripting
SNYK-JS-EXPRESS-7926867		586No Known Exploit
low severityCross-site Scripting
SNYK-JS-SERVESTATIC-7926865		586No Known Exploit
low severityCross-site Scripting
SNYK-JS-SEND-7926862		586No Known Exploit
critical severitySQL Injection
SNYK-JS-SEQUELIZE-2932027		586Proof of Concept
Release notes
Package name: express from express GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade express from 4.17.1 to 4.21.2
d3ba954
Snyk has created this PR to upgrade express from 4.17.1 to 4.21.2.
See this package in npm:
express
See this project in Snyk:
https://app.snyk.io/org/tizukanji/project/208dc152-1bbe-46e7-9626-6868f959be29?utm_source=github&utm_medium=referral&page=upgrade-pr
@openzeppelin-code

openzeppelin-codeBot commented Feb 27, 2025

Copy link
Copy Markdown

[Snyk] Upgrade express from 4.17.1 to 4.21.2

Generated at commit: d3ba95468430168fd551ebc416de5ac7df1a8fd1

🚨 Report Summary

Severity LevelResults
ContractsCritical
High
Medium
Low
Note
Total		0
0
0
0
0
0
DependenciesCritical
High
Medium
Low
Note
Total		0
0
0
0
0
0

For more details view the full report in OpenZeppelin Code Inspector

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@GLOBAL-FINTECH@snyk-bot