[Snyk] Upgrade express-validator from 6.1.1 to 6.12.0 #2

snyk-bot · 2021-08-04T23:40:05Z

Snyk has created this PR to upgrade express-validator from 6.1.1 to 6.12.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 20 versions ahead of your current version.
The recommended version was released 2 months ago, on 2021-06-14.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Remote Code Execution (RCE) SNYK-JS-PUGCODEGEN-1082232	405/1000 Why? CVSS 8.1	No Known Exploit
Remote Code Execution (RCE) SNYK-JS-PUG-1071616	405/1000 Why? CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	405/1000 Why? CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	405/1000 Why? CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	405/1000 Why? CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	405/1000 Why? CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	405/1000 Why? CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: express-validator

6.12.0 - 2021-06-14
- #1047, #1049 - make withMessage actually override a custom validator's message
- #1026, #1037 - add missing arguments of isAlphanumeric
6.11.1 - 2021-05-08
- #1034, #1035 - Fix publishing mistake with npm 7
6.11.0 - 2021-05-08
- #995, #999 - Make oneOf() work imperatively
6.10.1 - 2021-04-24
- #1001, #1004 - Updated dependencies
6.10.0 - 2021-02-23
- #735, #871, #948 - add migration example from v5 to v6
- #822, #974, #976 - add ability to run oneOf() imperatively
- #822, #977 - add ability to run checkSchema() imperatively
- #975 - fix objects whose toString property is not a function
- #882, #978 - add isObject validator
- #986, #987 - TypeScript - make isURL accept non-standard protocols
big kudos to @ fedeci for the many improvements! 🎉
6.9.2 - 2021-01-04
- #973 - TypeScript - republish of v6.9.1 without the source .ts files
6.9.1 - 2021-01-03
- #963 - TypeScript - Updated signature of isAlpha() to work again with the underlying validator
6.9.0 - 2020-12-25
- #848, #851 - Add support for bail in schemas
6.8.2 - 2020-12-25
- #963 - TypeScript - Update IsAlphaOptions#ignore to allow RegExps, in addition to string[]
6.8.1 - 2020-12-21
- #958, #959 - Upgrade validator to ^13.5.2
6.8.0 - 2020-12-08
6.7.0 - 2020-11-23
6.6.1 - 2020-08-02
6.6.0 - 2020-06-21
6.5.0 - 2020-05-17
6.4.1 - 2020-05-01
6.4.0 - 2020-02-01
6.3.1 - 2019-12-29
6.3.0 - 2019-11-24
6.2.0 - 2019-08-30
6.1.1 - 2019-07-01

from express-validator GitHub release notes

Commit messages

Package name: express-validator

7c68534 6.12.0
88d6f01 npm: upgrade docusaurus
9108832 Prioritize `withMessage` errors over the ones thrown by `CustomValidator` (#1049)
f9da949 chore(deps): bump ws from 7.4.0 to 7.4.6 (#1042)
50601dc chore: update `CONTRIBUTING.md` (#1043)
3bc2046 feat: add `options` to `isAlphanumeric` (#1037)
5062e33 chore: update `CONTRIBUTING.md` (#1038)
91a0859 chore(deps): bump hosted-git-info from 2.8.5 to 2.8.9 (#1036)
6670d19 6.11.1
3acfe49 npm: correctly exclude `.ts` files when publishing with `npm@7` (#1035)
69c8fbb 6.11.0
2a4ad43 fix(oneOf): return `Result` when running imperatively (#999)
83160ef deps: bump url-parse from 1.4.7 to 1.5.1 (#1033)
2f9efd9 docs: warn users about returning `falsy` values in `.if()` with async condition (#1029)
c064a8e 6.10.1
e550cd2 deps: update caniuse-lite
876da72 chore: document why not using `Symbol` for `contextsKey` (#1014)
ed45eec chore(deps): bump y18n from 4.0.0 to 4.0.1 (#1015)
7f136ce feat(website): add DocSearch as recommended by docusaurus (#857)
b1ab453 chore(deps): Bump lodash version to 4.17.21 (#1004)
4645318 chore(deps): bump prismjs from 1.21.0 to 1.23.0 (#1001)
735d76a chore: update issue templates (#997)
7ba714b chore: update issue templates (#991)
b9be25d 6.10.0