Skip to content

[Snyk] Security upgrade node-forge from 1.3.1 to 1.3.2 - #6

Open
garyschneir wants to merge 54 commits into
masterfrom
snyk-fix-2b3ff1c372ebb59f1cf4d36d4799d302
Open

[Snyk] Security upgrade node-forge from 1.3.1 to 1.3.2#6
garyschneir wants to merge 54 commits into
masterfrom
snyk-fix-2b3ff1c372ebb59f1cf4d36d4799d302

Conversation

@garyschneir

Copy link
Copy Markdown
Contributor

snyk-top-banner

Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
critical severity Interpretation Conflict
SNYK-JS-NODEFORGE-14114940
  751  
high severity Uncontrolled Recursion
SNYK-JS-NODEFORGE-14125745
  721  
medium severity Integer Overflow or Wraparound
SNYK-JS-NODEFORGE-14125097
  601  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

garyschneir and others added 30 commits July 17, 2023 21:59
Former-commit-id: f30f1c1a6b813494030b763b643dc5a8ee8f230e
…ter'

Ub1 1000 test harness in client library repo

See merge request ubiqsecurity/ubiq-node!18

Former-commit-id: 1d3d5a7814bc50d687fca8a515447370ce614d25
Former-commit-id: 01818b49ac5d89ffb295b07e4fff1c0c8d077a7d
…ter'

Added EncryptForSearchAsync documentation to README.md

See merge request ubiqsecurity/ubiq-node!19

Former-commit-id: 051e6c30e493d1b72e4e3170a33d07c0da5b2264
…ncludes...

Former-commit-id: 5ce079f58270bf979cad591317a9258ca4bb394b
Updated readme to include information for configuration files.  Also includes...

See merge request ubiqsecurity/ubiq-node!20

Former-commit-id: 193c5faba7de120d88017bd6acb1999c2ee902e5
Former-commit-id: 595c50bedce951451ce0c3c3a43e02b3168e042e
Ub1 1157 user defined billing metadata

See merge request ubiqsecurity/ubiq-node!21

Former-commit-id: 548d453aff417440f85f41ae4092ad6a1b317293
Former-commit-id: eb92f2de19f85b2820d36ae57afd6feadc90be0e
Updata unit test files

See merge request ubiqsecurity/ubiq-node!22

Former-commit-id: ab81b75ca668299b04227467e0d164b1d3b51cd1
Former-commit-id: 1c73b763e27b86bebdee2d6dc9bd758cc4e7abee
Ub1 1437 partial encryption

See merge request ubiqsecurity/ubiq-node!23

Former-commit-id: 5b4b5d15b04f7012e62364b1ea0dfa28c33897f1
Former-commit-id: ed4205781cc2622b140e8aa39bf26ed69cda739b
Former-commit-id: bba6cd72958645d3531451d4b3604bf5f6ef57c6
Updated to use datasets with partial encryption

See merge request ubiqsecurity/ubiq-node!24

Former-commit-id: 9e342fc3ec7a470f05183be192549787787b9989
…o handle directory

Former-commit-id: 79928c7ea3451ea26818c960fb98d79ea62de41c
Former-commit-id: cfb23e5af8be9451958d852fda028bf30581d94c
Former-commit-id: f5eb5faf93e5e211c614849c54ae9456ba2e2c1c
Updated jest timeout to 15000000

See merge request ubiqsecurity/ubiq-node!26

Former-commit-id: 95fd1e7669ceb7ef4d4cf3e177c3ff7e1c2fb2de
…519_chunk_test_files

Former-commit-id: 669a0882fd4bab220f444ecd5d799d7b1a660008
Broke unittest files into 125k record chunks and updated test drive to handle directory

See merge request ubiqsecurity/ubiq-node!25

Former-commit-id: 1124bae471a235d2c2f131fd903a01705b1b6aa9
Ub1 990 deprecated npm modules

See merge request ubiqsecurity/ubiq-node!27
Updated credentials link

See merge request ubiqsecurity/ubiq-node!28
Ub1 1674 okta idp

See merge request ubiqsecurity/ubiq-node!29
Ub1 1700 implement remaining caching

See merge request ubiqsecurity/ubiq-node!30
ifreshwater and others added 24 commits February 26, 2025 19:29
Readme Changes

See merge request ubiqsecurity/ubiq-node!31
Ub1 1641 entra support

See merge request ubiqsecurity/ubiq-node!32
Updated unit test files

See merge request ubiqsecurity/ubiq-node!34
Fix {} syntax in readme

See merge request ubiqsecurity/ubiq-node!33
added EncryptForSearch to the example app

See merge request ubiqsecurity/ubiq-node!35
Ub1 1759 structured bitlen

See merge request ubiqsecurity/ubiq-node!36
Migrate jest to mocha/chai

See merge request ubiqsecurity/ubiq-node!37
Change keepAlive default for node-fetch for Node20

See merge request ubiqsecurity/ubiq-node!39
Ub1 1844 thread safety updates

See merge request ubiqsecurity/ubiq-node!38
Update ci to run against dev server

See merge request ubiqsecurity/ubiq-node!40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants