[Snyk] Upgrade countly-sdk-nodejs from 19.8.0 to 22.2.0

[MarcelRaschke]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade countly-sdk-nodejs from 19.8.0 to 22.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2022-05-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Arbitrary File Write SNYK-JS-TAR-1579155	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579147	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579155	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579147	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Improper Privilege Management SNYK-JS-SHELLJS-2332187	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1585624	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1584358	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-MERGEDEEP-1070277	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-ASYNC-2441827	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-ASYNC-2441827	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-AJV-584908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-2824151	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1047770	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-PATHVAL-596926	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-FLAT-596927	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-2429795	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: countly-sdk-nodejs

• 22.2.0 - 2022-05-13
• 21.11.0 - 2022-02-09
  
  • !! Major breaking change !! Changing device ID without merging will now clear the current consent. Consent has to be given again after performing this action.
  • ! Minor breaking change ! Multiple values now have a default limit adjustable at initialization:
    • Maximum size of all string keys is now 128 characters by default.
    • Maximum size of all values in key-value pairs is now 256 characters by default.
    • Maximum amount of segmentation in one event is mow 30 key-value pairs by default.
    • Maximum amount of breadcrumbs that can be recorded at once is now 100 by default.
    • Maximum stack trace lines per thread is now 30 by default.
    • Maximum stack trace line length is now 200 by default.
  • ! Minor breaking change ! After initialization, the logging/debugging mode can only be changed with Countly.setLoggingEnabled instead of Countly.debug now.
  • When recording internal events with 'add_event', the respective feature consent will now be checked instead of just the 'events' consent.
  • Fixed a bug where the SDK throws a Bulk user storage exception due to a missing folder
  • Increased the default max event batch size to 100.
  • Logs are now color coded and indicate log levels.
• 20.11.0 - 2020-11-07
• 20.4.0 - 2020-04-30
• 19.8.0 - 2019-08-09

from countly-sdk-nodejs GitHub release notes

Commit messages

Package name: countly-sdk-nodejs

• 5236fe8 [SDK-686] idtype and request t ([Snyk] Upgrade electron-notarize from 1.0.0 to 1.2.1 #39)
• ae24421 version change ([Snyk] Upgrade fs-extra from 9.0.1 to 10.1.0 #40)
• 21bbc62 Updated readme
• 6220bd7 [Sdk 653] Linting changes ([Snyk] Upgrade winston from 3.3.3 to 3.8.1 #31)
• 2fd716b [SDK-448] Internal consent ([pull] master from devcode1981:master #19)
• 7b2db7b [SDK-585] Tests renewed ([Snyk] Upgrade semver-regex from 3.1.1 to 4.0.5 #30)
• e68bcdd [SDK-365] Internal Limits ([Snyk] Security upgrade electron from 9.3.2 to 18.3.11 #22)
• d230a31 coloring fix ([Snyk] Upgrade electron-store from 6.0.0 to 8.1.0 #29)
• e668ca0 [SDK-595] Consent update logic ([Snyk] Upgrade @svgr/cli from 5.4.0 to 6.3.1 #27)
• 4687c6a [SDK-612] Request success ([Snyk] Upgrade sinon from 9.0.2 to 14.0.0 #25)
• 757760e [SDK-574] Logs sorted out ([Snyk] Security upgrade electron from 9.3.2 to 18.3.12 #21)
• cb982a1 [SDK-609] Storage bug fixes ([Snyk] Upgrade tar from 6.0.2 to 6.1.11 #26)
• 52eaf42 tests fix ([Snyk] Upgrade standard from 14.3.4 to 17.0.0 #28)
• 9c352d2 [SDK-586] Commons module ([Snyk] Upgrade electron-updater from 4.3.5 to 5.2.3 #23)
• a1ac3ff [SDK-576] Github actionen ([Snyk] Upgrade got from 11.6.2 to 12.4.1 #24)
• d375d38 [SDK-565] Consent reset with newId ([Snyk] Security upgrade electron from 9.3.2 to 15.5.3 #18)
• 68de8b1 Updaging actions
• 8f90c6b travis gone ([Snyk] Security upgrade electron from 9.3.2 to 19.0.15 #20)
• b334206 [SDK-324] Changelog and batch size ([Snyk] Security upgrade electron from 9.3.2 to 15.5.3 #16)
• e78c04a [SDK-566] Version change ([Snyk] Security upgrade electron-builder from 22.8.1 to 23.5.0 #17)
• c1608e4 Merge pull request [Snyk] Upgrade go-ipfs from 0.7.0 to 0.14.0 #14 from milahu/patch-1
• bd6d92a fix: mkdir recursive of storage_path
• 965f235 Update node.js.yml
• a26d38c Update generateDocs.sh

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs