Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: http-proxy, proxy-from-env #1

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

KatanMichael
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

http-proxy
from 1.11.1 to 1.18.1 | 18 versions ahead of your current version | 4 years ago
on 2020-05-17
proxy-from-env
from 0.0.1 to 0.1.1 | 2 versions ahead of your current version | 8 years ago
on 2016-10-17

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Denial of Service (DoS)
SNYK-JS-HTTPPROXY-569139
646 Proof of Concept
Release notes
Package name: http-proxy
  • 1.18.1 - 2020-05-17

    1.18.1

  • 1.18.0 - 2019-09-18

    Version 1.18.0

  • 1.17.0 - 2018-04-20

    Due to some great contributions I'm happy to announce a new release of http-proxy containing numerous bug fixes, feature additions and documentation improvements. Thanks to all who contributed for their patience and willingness to contribute despite perceived stagnation in activity in the project. I welcome all contributions and those who are interested in getting more involved with the project. Below I will highlight the changes that landed in the latest version but you can find the full diff of the changes in #1251

    • Add option to rewrite path of set-cookie headers. @ swillis12
    • Add option for overriding http METHOD when proxying request @ AydinChavez
    • Feature: selfHandleResponse for taking responsibility in returning your own response when listening on the proxyRes event. @ cpd0101 @ guoxiangyang
    • Add followRedirects option @ n30n0v
    • Document timeout option @ jlaamanen
    • Fix documentation typos @ carpsareokiguess
    • Document buffer option @ jonhunter1977
    • Include websocket non-upgrade response instead of just closing the socket. Allows auth schemes to be possible with websocket proxying. @ Tigge
    • Stop using the writeHead method explicitly and let node handle it internally to prevent thrown errors @ jakefurler
    • Be more defensive in handling of detecting response state when proxying @ thiagobustamante
  • 1.16.2 - 2016-12-06

    1.16.2

  • 1.16.1 - 2016-12-04

    Version 1.16.1

  • 1.16.0 - 2016-12-02

    1.16.0

  • 1.15.2 - 2016-10-22

    1.15.2

  • 1.15.1 - 2016-09-14

    Version 1.15.1

  • 1.15.0 - 2016-09-14

    Version 1.15.0

  • 1.14.0 - 2016-06-15

    Version 1.14.0

  • 1.13.3 - 2016-05-16
  • 1.13.2 - 2016-02-17
  • 1.13.1 - 2016-02-02
  • 1.13.0 - 2016-01-26
  • 1.12.1 - 2016-01-24
  • 1.12.0 - 2015-10-22
  • 1.11.3 - 2015-10-19
  • 1.11.2 - 2015-08-30
  • 1.11.1 - 2015-04-22
from http-proxy GitHub release notes
Package name: proxy-from-env from proxy-from-env GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade:
  - http-proxy from 1.11.1 to 1.18.1.
    See this package in npm: https://www.npmjs.com/package/http-proxy
  - proxy-from-env from 0.0.1 to 0.1.1.
    See this package in npm: https://www.npmjs.com/package/proxy-from-env

See this project in Snyk:
https://app.snyk.io/org/katanmichael/project/f18f994b-ad3f-44fb-b7d4-6d40a3fd72cc?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants