Skip to content

Conversation

JamesMatchett
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • DiscordBot/package.json
    • DiscordBot/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: eris The new version differs by 151 commits.
  • 760d959 0.11.3
  • 9e7e85f Update Discord REST API domain
  • 2df1080 0.11.2
  • 6fcfc8c Fix aborted listener
  • f952ada Update cache in createRole() (#604)
  • 9d377c9 Update channelUpdate typings (#594)
  • 6bc8993 Fix createGuild() reference error (#588)
  • f4ba182 Added bannerURL/splashURL typings (#597)
  • c2bd557 Add more properties to OldPresence type (#598)
  • a4fe81f Add activity type 4 (#599)
  • 3fd70d4 Improved ESM support (#603)
  • db95115 Create toString() functions for remaining classes
  • c735cc7 Bump dependencies
  • 1c395d2 Fix voiceChannelLeave docs/typings (#590)
  • cb62e78 Fix typings for some update events (#586)
  • 2278554 Make IP discovery port parsing use big endian (#593)
  • d68dba5 Add new Message flags (#585)
  • 65dda68 Allow embed timestamp to be Date in typings (#587)
  • 9eee8ed Promisified Guild#fetchAllMembers (#576)
  • 3046b24 Use conditional assignment in more update() methods
  • db4deb3 Add selfStream support (#583)
  • 09c118b Add type definition to package.json (#577)
  • 07ba8f2 Add curly linter rule (#581)
  • 6185094 Fix guildCreate docs (#580)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

… vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-WS-1296835
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants