[Snyk] Upgrade cookie-session from 2.0.0-rc.1 to 2.1.0

[Hawthorne001]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade cookie-session from 2.0.0-rc.1 to 2.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2024-01-24.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: cookie-session

• 2.1.0 - 2024-01-24
  
  • Fix loading sessions with special keys
  • deps: cookies@0.9.1
    • Add partitioned option for CHIPS support
    • Add priority option for Priority cookie support
    • Fix accidental cookie name/value truncation when given invalid chars
    • Fix maxAge option to reject invalid values
    • Remove quotes from returned quoted cookie value
    • Use req.socket over deprecated req.connection
    • pref: small lookup regexp optimization
• 2.0.0 - 2021-12-16
  
  • Change default cookie name to session
  • Change .populated to .isPopulated
  • Create new session for all types of invalid sessions
  • Drop support for Node.js 0.8
  • Remove private req.session.save()
  • Remove the key option; use name instead
  • Remove undocumented req.session.length to free up key name
  • Remove undocumented req.sessionCookies and req.sessionKey
  • Save all enumerable properties on req.session
    • Including _-prefixed properties
  • Use Object.defineProperty instead of deprecated __define*__
  • Use safe-buffer for improved Buffer API
  • deps: cookies@0.8.0
    • Fix check for default secure option behavior
    • Fix maxAge option preventing cookie deletion
    • Support "none" in sameSite option
    • deps: depd@~2.0.0
    • deps: keygrip@~1.1.0
    • perf: remove argument reassignment
  • deps: debug@3.2.7
    • Add DEBUG_HIDE_DATE
    • Add 256 color mode support
    • Enable / disable namespaces dynamically
    • Make millisecond timer namespace-specific
    • Remove DEBUG_FD support
    • Use Date#toISOString() when output is not a TTY
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
  • deps: safe-buffer@5.2.1
  • perf: reduce the scope of try-catch deopt
  • perf: remove internal reference to request from session object
• 2.0.0-rc.1 - 2020-01-24
  
  • Remove private req.session.save()
  • Remove undocumented req.session.length to free up key name
  • Remove undocumented req.sessionCookies and req.sessionKey
  • deps: cookies@0.8.0
    • Fix check for default secure option behavior
    • Fix maxAge option preventing cookie deletion
    • Support "none" in sameSite option
    • deps: depd@~2.0.0
    • deps: keygrip@~1.1.0
    • perf: remove argument reassignment
  • deps: debug@3.2.6
  • deps: on-headers@~1.0.2
    • Fix res.writeHead patch missing return value
  • deps: safe-buffer@5.2.0
  • perf: remove internal reference to request from session object

from cookie-session GitHub release notes

Commit messages

Package name: cookie-session

• ff7c2b2 2.1.0
• 51e7ce4 Fix loading sessions with special keys
• 16c12cf tests: add more tests around signed cookies
• 0dc9683 deps: cookies@0.9.1
• f77fa09 build: Node.js@20.11
• db0ff50 build: supertest@6.3.4
• e060228 build: Node.js@21.6
• 7dc0c5d docs: update link to cookie limits
• 08e8d62 build: eslint-plugin-import@2.29.1
• 0c4d5af build: eslint@8.56.0
• a9af874 build: Node.js@18.19
• 124c30a build: Node.js@20.10
• fb2d513 build: support Node.js 21.x
• 46390ee build: supertest@6.3.3
• 5e38a0d build: mocha@10.2.0
• 32ad166 build: Node.js@18.18
• faab59d build: Node.js@20.8
• bcffebc build: eslint-plugin-import@2.28.1
• bb6da7d build: eslint@8.49.0
• 7e76014 build: eslint-plugin-markdown@3.0.1
• e9f6b2c build: Node.js@16.20
• c63804b build: Node.js@19.9
• 7327461 build: Node.js@18.17
• e43043d build: support Node.js 20.x

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs