[Snyk] Upgrade nodemon from 2.0.4 to 2.0.16 #279

snyk-bot · 2022-06-04T22:30:58Z

Snyk has created this PR to upgrade nodemon from 2.0.4 to 2.0.16.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 22 versions ahead of your current version.
The recommended version was released a month ago, on 2022-04-29.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-610226	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-1023599	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TMPL-1583443	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Arbitrary File Write SNYK-JS-TAR-1579155	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1585624	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1584358	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-OBJECTPATH-1585658	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-OBJECTPATH-1017036	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-MERGEDEEP-1070277	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-LODASH-567746	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Command Injection SNYK-JS-LODASH-1040724	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-INI-1048974	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Command Injection SNYK-JS-FINDPROCESS-1090284	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-AWSSDK-1059424	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-AJV-584908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-1072471	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-2824151	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1047770	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PROMPTS-1729737	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-OBJECTPATH-1569453	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Denial of Service SNYK-JS-NODEFETCH-674311	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-559764	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HIGHLIGHTJS-1048676	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-FLAT-596927	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Server-Side Request Forgery (SSRF) SNYK-JS-AXIOS-1038255	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-ALGOLIASEARCHHELPER-1570421	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: nodemon

2.0.16 - 2022-04-29
2.0.16 (2022-04-29)

Bug Fixes
- support windows by using path.delimiter (e26aaa9)
2.0.15 - 2021-11-09
2.0.15 (2021-11-09)

Bug Fixes
- bump prod dep versions (54784ab)
2.0.14 - 2021-10-19
2.0.14 (2021-10-19)

Bug Fixes
- add windows signals SIGUSR2 & SIGUSR1 to terminate the process (#1938) (61e7abd), closes #1903 #1915 #1936 #1937 #1882 #1893
2.0.14-alpha.1 - 2021-10-18
2.0.13 - 2021-09-23
2.0.13 (2021-09-23)

Bug Fixes
- bump update-notifier (90e7a3e), closes #1919
- release process on main (9f82a48)
2.0.13-alpha.1 - 2021-07-27
2.0.12 - 2021-07-10
2.0.12 (2021-07-10)

Bug Fixes
- windows: properly handle quoted args in event (0823f18), closes #1823
2.0.12-alpha.3 - 2021-07-10
2.0.12-alpha.2 - 2021-07-10
2.0.12-alpha.1 - 2021-07-10
2.0.11 - 2021-07-09
2.0.11 (2021-07-09)

Bug Fixes
- ensure numerical OS version check (f523d0e)
2.0.11-alpha.1 - 2021-07-09
2.0.10 - 2021-07-08
2.0.10 (2021-07-08)

Bug Fixes
- windows 8 doesn't support windows-kill (6c6cb65), closes #1876
2.0.10-alpha.2 - 2021-07-07
2.0.10-alpha.1 - 2021-07-02
2.0.9 - 2021-06-30
2.0.9 (2021-06-30)

Bug Fixes
- allow windows users to install globally again (#1874) (3242215), closes #1872
2.0.8 - 2021-06-29
2.0.8 (2021-06-29)

Bug Fixes
- add support for SIGINT on Windows (fixes issue #1720) (#1853) (500c1b0)
2.0.8-alpha.a - 2021-05-05
2.0.8-alpha.1 - 2021-06-30
2.0.7 - 2021-01-06

2.0.7 (2021-01-06)

Bug Fixes
- postinstall hide message in CI (3d2320f)
- redirect help (#1825) (ac0b55e), closes #1807
2.0.6 - 2020-10-19
2.0.5 - 2020-10-13
2.0.4 - 2020-05-14

from nodemon GitHub release notes

Commit messages

Package name: nodemon

e26aaa9 fix: support windows by using path.delimiter
9d1afd7 docs: add syntax highlighting to sample-nodemon.md (The autoupdater does not support crons github/docs#1982) (Tiny headline adjustment for the Issue event types page github/docs#2004)
de5d32a docs: Unified Node.js capitalization (#1986)
e890927 docs: add note to faq with example showing how to watch any file extension (Add info on where posts are published to github/docs#1931)
bc4547b chore: update sponsors
07159c5 chore: add supporters
cd100da chore: update supporters
6a34922 chore: supporters
e5d6067 chore: updating supporters
242f9f7 Merge branch 'main' of github.com:remy/nodemon
141e58c chore: update supporters
53422af ci(release): workflow uses 'npm' cache (Difficulty finding a post I just published from my Github Page github/docs#1933)
581c641 ci(node.js): workflow uses 'npm' cache (Thanks for opening this pull request! A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the [contributing guidelines](https://github.com/github/docs/blob/main/CONTRIBUTING.md). github/docs#1934)
cb1c8b9 docs: Fix typo in faq.md (695566555324 github/docs#1950)
54784ab fix: bump prod dep versions
26db983 chore: update supporters
61e7abd fix: add windows signals SIGUSR2 & SIGUSR1 to terminate the process (cover triage level permissions for labels github/docs#1938)
b449171 docs: Fix typo in faq.md
0a3175f chore: update supporters
18516d8 chore: add supporter
b91a61d chore: add releaserc
d8c285f chore: set release workflow node version
99e3b32 chore: fix workflow branch
9f82a48 fix: release process on main

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade nodemon from 2.0.4 to 2.0.16. See this package in npm: https://www.npmjs.com/package/nodemon See this project in Snyk: https://app.snyk.io/org/bram00767/project/4d23c36f-b856-479c-91e2-6eda8638a73e?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade nodemon from 2.0.4 to 2.0.16 #279

[Snyk] Upgrade nodemon from 2.0.4 to 2.0.16 #279

snyk-bot commented Jun 4, 2022

2.0.16 (2022-04-29)

Bug Fixes

2.0.15 (2021-11-09)

Bug Fixes

2.0.14 (2021-10-19)

Bug Fixes

2.0.13 (2021-09-23)

Bug Fixes

2.0.12 (2021-07-10)

Bug Fixes

2.0.11 (2021-07-09)

Bug Fixes

2.0.10 (2021-07-08)

Bug Fixes

2.0.9 (2021-06-30)

Bug Fixes

2.0.8 (2021-06-29)

Bug Fixes

2.0.7 (2021-01-06)

Bug Fixes

[Snyk] Upgrade nodemon from 2.0.4 to 2.0.16 #279

Are you sure you want to change the base?

[Snyk] Upgrade nodemon from 2.0.4 to 2.0.16 #279

Conversation

snyk-bot commented Jun 4, 2022

Snyk has created this PR to upgrade nodemon from 2.0.4 to 2.0.16.

2.0.16 (2022-04-29)

Bug Fixes

2.0.15 (2021-11-09)

Bug Fixes

2.0.14 (2021-10-19)

Bug Fixes

2.0.13 (2021-09-23)

Bug Fixes

2.0.12 (2021-07-10)

Bug Fixes

2.0.11 (2021-07-09)

Bug Fixes

2.0.10 (2021-07-08)

Bug Fixes

2.0.9 (2021-06-30)

Bug Fixes

2.0.8 (2021-06-29)

Bug Fixes

2.0.7 (2021-01-06)

Bug Fixes