[Snyk] Upgrade sinon from 2.3.5 to 11.1.2 #5

snyk-bot · 2021-10-04T23:38:19Z

Snyk has created this PR to upgrade sinon from 2.3.5 to 11.1.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 109 versions ahead of your current version.
The recommended version was released 2 months ago, on 2021-07-27.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) npm:sshpk:20180409	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution npm:extend:20180424	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:diff:20180305	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-Y18N-1021887	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Access Restriction Bypass SNYK-JS-XMLHTTPREQUESTSSL-1255647	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Arbitrary Code Injection SNYK-JS-XMLHTTPREQUESTSSL-1082936	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-610226	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-1023599	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TMPL-1583443	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-450213	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-450213	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-MIXINDEEP-450212	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Arbitrary Code Execution SNYK-JS-ISMYJSONVALID-597167	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISMYJSONVALID-597165	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-INI-1048974	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-469063	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-174183	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-173692	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Cryptographic Issues SNYK-JS-ELLIPTIC-571484	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-DATATABLESNET-1016402	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Denial of Service (DoS) npm:mem:20180117	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:ua-parser-js:20180227	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-1072471	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Command Injection SNYK-JS-NODENOTIFIER-1035794	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Arbitrary File Read SNYK-JS-MACADDRESS-567156	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-HANDLEBARS-567742	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-HANDLEBARS-1279029	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-DOTPROP-543489	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-DATATABLESNET-598806	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:moment:20170905	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-MERGE-72553	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Mature
Arbitrary Command Injection npm:macaddress:20180511	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Validation Bypass SNYK-JS-KINDOF-537849	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-JSONPOINTER-598804	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-HTTPPROXY-569139	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-HANDLEBARS-534988	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Timing Attack SNYK-JS-ELLIPTIC-511941	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-1298035	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-DATATABLESNET-1540544	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Arbitrary File Write via Archive Extraction (Zip Slip) npm:adm-zip:20180415	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Mature

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sinon

from sinon GitHub release notes

Commit messages

Package name: sinon

e97b842 Update docs/changelog.md and set new release id in docs/_config.yml
6314266 Add release documentation for v11.1.2
ecb6e93 11.1.2
8200ef4 Update CHANGELOG.md and AUTHORS for new release
264481d Upgrade @ sinonjs/fake-timers to latest
08e9536 Copy over acessor properties to target object assets: add theme path to coffeescript's processing; rakefile: fix feature/env settings openedx/edx-platform#2387
15c9539 Refactor fake (Increase timeout for ORA get feedback promise in bok-choy test. openedx/edx-platform#2389)
57c6c63 Bump addressable from 2.7.0 to 2.8.0
62b29c0 Use runkit snippets in fake documentation (Keyboard events and ARIA markup added to speed control openedx/edx-platform#2381)
6f50e6a Bump ws from 7.4.5 to 7.4.6 (Allow for inactivity timeout configuration to come from aws.py openedx/edx-platform#2380)
ad990c8 Update CHANGELOG.md
55dd22d Update docs/changelog.md and set new release id in docs/_config.yml
4724da0 Add release documentation for v11.1.1
a9801c9 11.1.1
03a5ca0 Update CHANGELOG.md and AUTHORS for new release
b18193e Fix Add AWS.py configuration hooks to tie in login failure lockout parameters openedx/edx-platform#2379 by using v7 of supports-color
31be9a5 Update docs/changelog.md and set new release id in docs/_config.yml
b901a02 Add release documentation for v11.1.0
b91c955 11.1.0
9581e27 Update CHANGELOG.md and AUTHORS for new release
0e1ed12 Make sure to link to the right folder ...
8f787c6 Exit on errors
7f271ff Add sinon.promise() implementation (Prevent from tabbing on lostpassword link in login page openedx/edx-platform#2369)
583f034 Fix Prettier errors

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade sinon from 2.3.5 to 11.1.2. See this package in npm: https://www.npmjs.com/package/sinon See this project in Snyk: https://app.snyk.io/org/baby636/project/814ba988-2b70-4b15-b3b5-5a8d150afda6?utm_source=github&utm_medium=referral&page=upgrade-pr

snyk-bot mentioned this pull request Feb 17, 2022

[Snyk] Security upgrade @edx/stylelint-config-edx from 1.1.0 to 1.1.2 #15

Open

baby636 mentioned this pull request Oct 2, 2023

[Snyk] Fix for 1 vulnerabilities #50

Open

This was referenced Nov 28, 2023

[Snyk] Fix for 37 vulnerabilities #54

Open

[Snyk] Fix for 1 vulnerabilities #55

Open

baby636 mentioned this pull request May 22, 2024

[Snyk] Security upgrade @edx/stylelint-config-edx from 1.1.0 to 1.1.2 #67

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade sinon from 2.3.5 to 11.1.2 #5

[Snyk] Upgrade sinon from 2.3.5 to 11.1.2 #5

snyk-bot commented Oct 4, 2021

[Snyk] Upgrade sinon from 2.3.5 to 11.1.2 #5

Are you sure you want to change the base?

[Snyk] Upgrade sinon from 2.3.5 to 11.1.2 #5

Conversation

snyk-bot commented Oct 4, 2021

Snyk has created this PR to upgrade sinon from 2.3.5 to 11.1.2.