Skip to content

Conversation

@golanha
Copy link
Member

@golanha golanha commented Jun 30, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade etcd3 from 1.0.2 to 1.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 3 years ago, on 2020-11-29.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Prototype Pollution
SNYK-JS-GRPCGRPCJS-1038818
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Prototype Pollution
SNYK-JS-PROTOBUFJS-2441248
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Prototype Pollution
SNYK-JS-Y18N-1021887
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Improper Verification of Cryptographic Signature
SNYK-JS-NODEFORGE-2430339
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Information Exposure
SNYK-JS-NODEFETCH-2342118
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit
Open Redirect
SNYK-JS-NODEFORGE-2330875
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept
Prototype Pollution
SNYK-JS-NODEFORGE-2331908
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit
Improper Verification of Cryptographic Signature
SNYK-JS-NODEFORGE-2430337
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit
Improper Verification of Cryptographic Signature
SNYK-JS-NODEFORGE-2430341
482/1000
Why? Proof of Concept exploit, CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: etcd3
  • 1.1.0 - 2020-11-29
    • docs: elections ee47cc6
    • refactor: apply treatment to campaigns as well 4b92eed
    • refactor: solidify observer side of elections a7ae3d6
    • prevent user errors in watcher event listeners from causing backoffs in the underlying stream cead70a
    • fix: buffers not allowed in typings Namespace.get(key) 69129eb
    • Merge branch 'pr/yujuiting/66' 0f7447c
    • docs: fix incorrect docs link (#139) 1c5b748
    • docs: fix usage example of defaultCallOptions 0a951cc
    • docs: update 964d7d8
    • style(election): docs and style b256a79
    • refactor(election): refine and handle error properly be5096f
    • refactor(election): listen newListener instead of overriding ab56da4
    • fix(election): some minor fix 4de3d78
    • fix(election): fix test fail 7c3563f
    • fix(election): recreate lease after lost d48e834
    • fix(election): recreate lease after revoked 88c551a
    • refactor(election): emit or throw error c015360
    • fix(election): hide namespace and lease from election 914cf40
    • fix(election): correct logic of waitForElected abf5442
    • refactor(election): remove useless comment and add comma 2042ba1
    • feat(election): observe election df8b77d
    • fix(election): revoke lease after resign fail 137a906
    • fix(election): resign if error when waiting 40db9ab
    • fix(election): revoke lease if resign fail 4ae8e05
    • refactor(election): errors and remove redundant dc033ef
    • refactor(election): refine ed4bf1d
    • refactor(election): rename confusing variable fed1829
    • fix(election): only proclaim if value changed a56d18e
    • fix(election): allow custom ttl b6bb40d
    • test(election): more exception test ebabd57
    • feat(election): implmentation and unit test 6234c82

    v1.0.2...v1.1.0

  • 1.0.2 - 2020-09-19
    • feat: allow passing a set of default CallOptions in new Etcd3() 5f973eb
    • fix: don't include the deadline in inherited lease call options 66b1769
    • docs: fix error in lease example b81df91
    • fix: update version of cockatiel to fix incompatible TypeScript types b9b2cd2

    v1.0.1...v1.0.2

from etcd3 GitHub release notes
Commit messages
Package name: etcd3
  • c296d03 1.1.0
  • ee47cc6 docs: elections
  • 4b92eed refactor: apply treatment to campaigns as well
  • a7ae3d6 refactor: solidify observer side of elections
  • cead70a prevent user errors in watcher event listeners from causing backoffs in the underlying stream
  • 69129eb fix: buffers not allowed in typings Namespace.get(key)
  • 0f7447c Merge branch 'pr/yujuiting/66'
  • 1c5b748 docs: fix incorrect docs link (#139)
  • 0a951cc docs: fix usage example of defaultCallOptions
  • 964d7d8 docs: update
  • b256a79 style(election): docs and style
  • be5096f refactor(election): refine and handle error properly
  • ab56da4 refactor(election): listen `newListener` instead of overriding
  • 4de3d78 fix(election): some minor fix
  • 7c3563f fix(election): fix test fail
  • d48e834 fix(election): recreate lease after lost
  • 88c551a fix(election): recreate lease after revoked
  • c015360 refactor(election): emit or throw error
  • 914cf40 fix(election): hide namespace and lease from election
  • abf5442 fix(election): correct logic of waitForElected
  • 2042ba1 refactor(election): remove useless comment and add comma
  • df8b77d feat(election): observe election
  • 137a906 fix(election): revoke lease after resign fail
  • 40db9ab fix(election): resign if error when waiting

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


This change is Reviewable

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants