[Snyk] Upgrade fsevents from 1.2.2 to 1.2.13 #263

LimpFoot2 · 2024-05-07T14:16:07Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade fsevents from 1.2.2 to 1.2.13.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 10 versions ahead of your current version.
The recommended version was released 4 years ago, on 2020-05-05.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Arbitrary File Overwrite SNYK-JS-TAR-1536531	624/1000 Why? Has a fix available, CVSS 8.2	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	624/1000 Why? Has a fix available, CVSS 8.2	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	624/1000 Why? Has a fix available, CVSS 8.2	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	624/1000 Why? Has a fix available, CVSS 8.2	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-174125	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Prototype Pollution npm:deep-extend:20180409	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Prototype Pollution SNYK-JS-INI-1048974	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Arbitrary File Overwrite SNYK-JS-TAR-1536528	624/1000 Why? Has a fix available, CVSS 8.2	No Known Exploit
Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Time of Check Time of Use (TOCTOU) npm:chownr:20180731	624/1000 Why? Has a fix available, CVSS 8.2	No Known Exploit
Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	624/1000 Why? Has a fix available, CVSS 8.2	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-559764	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-559764	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	624/1000 Why? Has a fix available, CVSS 8.2	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	624/1000 Why? Has a fix available, CVSS 8.2	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: fsevents

1.2.13 - 2020-05-05
Only build on Mac-OSX
1.2.12 - 2020-03-19
Release 1.2.12.
1.2.11 - 2019-12-14
Removing node-pre-gyp so that building fsevents becomes easier and enabled without the download of binaries.

The credentials to the AWS store have been lost. Releasing to AWS is both insecure and no longer possible due to the lost credentials.
1.2.10 - 2019-12-13
No content.
1.2.9 - 2019-04-29
No content.
1.2.8 - 2019-04-16
1.2.7 - 2019-01-18
1.2.6 - 2019-01-15
1.2.4 - 2018-05-15
1.2.3 - 2018-04-27
1.2.2 - 2018-04-23

from fsevents GitHub release notes

Commit messages

Package name: fsevents

844a05d Version Bump
f393f2a Only build fsevents on macOS ([Snyk] Security upgrade certifi from 2021.5.30 to 2024.7.4 #322)
6a281a7 [publish binary]
acc2bce [publish binary]
f532b6e [publish binary]
4c6a1c0 Add node 13 to travis matrix.
92e40aa Release 1.2.12.
909af26 Release v1.2.11
7074adb Release v1.2.10
0a052f6 Node.js v12 support for v1.x ([Snyk] Upgrade web3 from 0.18.4 to 0.20.7 #274)
2e8bfd1 Address Security Issue via node-pre-gyp/tar ([Snyk] Upgrade stopwords from 0.0.1 to 0.0.9 #266)
6d47d4f Cleaner Packaging & Updated Dependencies
a56b778 Bump Version (to bundle node-pre-gyp)
3f7146e Bump Version
467c958 Update Travis Tests: drop v0.x
85b3166 Merge pull request [Snyk] Security upgrade lodash from 1.3.1 to 4.17.17 #250 from pipobscure/v1.2.5
71bcefa Update to build for node v11
4c48d82 Use libuv thread API.
5e8ce8a Use libuv mutex API.
6faf0c0 Work around race in platform fsevents reporting.
0effedf 1.2.4
3902880 Update node-pre-gyp to ^0.10.0
fbdb9e5 1.2.3
c02045d Minor changes