Skip to content

[Snyk] Upgrade semver from 5.4.1 to 7.7.2#11

Open
SherfeyInv wants to merge 1 commit intomasterfrom
snyk-upgrade-dfb0cc2973d7a06044541e19aa72940b
Open

[Snyk] Upgrade semver from 5.4.1 to 7.7.2#11
SherfeyInv wants to merge 1 commit intomasterfrom
snyk-upgrade-dfb0cc2973d7a06044541e19aa72940b

Conversation

@SherfeyInv
Copy link

@SherfeyInv SherfeyInv commented Aug 25, 2025

snyk-top-banner

Snyk has created this PR to upgrade semver from 5.4.1 to 7.7.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 45 versions ahead of your current version.

  • The recommended version was released 3 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 750 Proof of Concept
Release notes
Package name: semver from semver GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
feat: upgrade semver from 5.4.1 to 7.7.2
bc97e79 
Snyk has created this PR to upgrade semver from 5.4.1 to 7.7.2.

See this package in npm:
semver

See this project in Snyk:
https://app.snyk.io/org/sherfeyinv/project/02b601a1-d89d-441e-8049-1c9f3af1e1a7?utm_source=github&utm_medium=referral&page=upgrade-pr
@socket-security
Copy link

socket-security bot commented Aug 25, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addeduid2@​0.0.41001007176100
Addedpassport-strategy@​1.0.01001008376100
Updatedpassport-github@​0.1.5 ⏵ 1.1.099 +1100100 +1076100
Addedpassport-oauth2@​1.8.010010010076100
Addedbase64url@​3.0.110010010079100
Updatedsemver@​5.4.1 ⏵ 7.7.2100100 +16100 +185 +1100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@SherfeyInv @snyk-bot