Title: [Snyk] Security upgrade express from 4.16.0 to 4.19.2 by codenough · Pull Request #37 · codenough/python-flask-sample-app · GitHub
Open Graph Title: [Snyk] Security upgrade express from 4.16.0 to 4.19.2 by codenough · Pull Request #37 · codenough/python-flask-sample-app
X Title: [Snyk] Security upgrade express from 4.16.0 to 4.19.2 by codenough · Pull Request #37 · codenough/python-flask-sample-app
Description: This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. Changes included in this PR Changes to the following files to upgrade the vulnerable dependencies to a fixed version: package.json Vulnerabilities that will be fixed With an upgrade: Severity Priority Score (*) Issue Breaking Change Exploit Maturity 591/1000 Why? Recently disclosed, Has a fix available, CVSS 6.1 Open Redirect SNYK-JS-EXPRESS-6474509 No No Known Exploit (*) Note that the real score may have changed since the PR was raised. Commit messages Package name: express The new version differs by 250 commits. b28db2c 4.19.2 0b74695 Improved fix for open redirect allow list bypass 4f0f6cc 4.19.1 a003cfa Allow passing non-strings to res.location with new encoding handling checks fixes #5554 #5555 a1fa90f fixed un-edited version in history.md for 4.19.0 11f2b1d build: fix build due to inconsistent supertest behavior in older versions 084e365 4.19.0 0867302 Prevent open redirect allow list bypass due to encodeurl 567c9c6 Add note on how to update docs for new release (#5541) 69a4cf2 deps: cookie@0.6.0 4ee853e docs: loosen TC activity rules 414854b docs: nominating @ wesleytodd to be project captian 06c6b88 docs: update release date 1b51eda 4.18.3 b625132 build: pin Node 21.x to minor e3eca80 build: pin Node 21.x to minor 23b44b3 build: support Node.js 21.6.2 b9fea12 build: support Node.js 21.x in appveyor c259c34 build: support Node.js 21.x fdeb1d3 build: support Node.js 20.x in appveyor 734b281 build: support Node.js 20.x 0e3ab6e examples: improve view count in cookie-sessions 59af63a build: Node.js@18.19 e720c5a docs: add documentation for benchmarks See the full diff Check the changes in this PR to ensure they won't cause issues with your project. Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs. For more information: 🧐 View latest project report 🛠 Adjust project settings 📚 Read more about Snyk's upgrade and patch logic Learn how to fix vulnerabilities with free interactive lessons: 🦉 Open Redirect
Open Graph Description: This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. Changes inc...
X Description: This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. Changes inc...
Opengraph URL: https://github.com/codenough/python-flask-sample-app/pull/37
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:0c7bb5a2-1662-02a7-26a4-b4b333f5143a |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | C090:1A8805:49A35E:6B5238:6A61EA09 |
| html-safe-nonce | 90d0a8e79e2d4eef39008c8e4b6a03e8fb7a88c4e723c52fe5d8bfde22179c29 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDMDkwOjFBODgwNTo0OUEzNUU6NkI1MjM4OjZBNjFFQTA5IiwidmlzaXRvcl9pZCI6IjU1MjU3Njg0OTk0NzcyMTE2NTgiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | cf423a67b8e705baf5b5b5c5bdbfa66e652e77a70c46867a912ac90da413c446 |
| hovercard-subject-tag | pull_request:1793075650 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/codenough/python-flask-sample-app/pull/37/files |
| twitter:image | https://avatars.githubusercontent.com/u/28827984?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/28827984?s=400&v=4 |
| og:image:alt | This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. Changes inc... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 5dd1217fff37e297563b9d318ee02bf6378c8957c6195b77786bb8896fc9c95d |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/codenough/python-flask-sample-app git https://github.com/codenough/python-flask-sample-app.git |
| octolytics-dimension-user_id | 28827984 |
| octolytics-dimension-user_login | codenough |
| octolytics-dimension-repository_id | 159823805 |
| octolytics-dimension-repository_nwo | codenough/python-flask-sample-app |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | true |
| octolytics-dimension-repository_parent_id | 127498850 |
| octolytics-dimension-repository_parent_nwo | codefresh-contrib/python-flask-sample-app |
| octolytics-dimension-repository_network_root_id | 127498850 |
| octolytics-dimension-repository_network_root_nwo | codefresh-contrib/python-flask-sample-app |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 554667f6dda2a53c83687de64fabc457970f0f04 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width