[Snyk] Upgrade shelljs from 0.8.3 to 0.8.5 by snyk-bot · Pull Request #53 · ZoomCar/zcui

snyk-bot · 2022-09-02T20:58:52Z

Snyk has created this PR to upgrade shelljs from 0.8.3 to 0.8.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 2 versions ahead of your current version.
The recommended version was released 8 months ago, on 2022-01-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Improper Privilege Management SNYK-JS-SHELLJS-2332187	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: shelljs

0.8.5 - 2022-01-07
This was a small security fix for #1058.
0.8.4 - 2020-04-25
Small patch release to fix a circular dependency warning in node v14. See #973.
0.8.3 - 2018-11-13
Closed issues:
- Shelljs print stderr to console even if exec-only "silent" is true #905
- refactor: remove common.state.tempDir #902
- Can't suppress stdout for echo #899
- exec() doesn't apply the arguments correctly #895
- shell.exec('npm pack') painfully slow #885
- shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881
- test infra: mocks and skipOnWin conflict #862
- Support for shell function completion on IDE #859
- echo command shows options in stdout #855
- silent does not always work #851
- Appveyor installs the latest npm, instead of the latest compatible npm #844
- Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830
- inconsistent result when trying to echo to a file #798
- Prevent require()ing executable-only files #789
- Cannot set property to of [object String] which has only a getter #752
- which() should check executability before returning a value #657
- Bad encoding experience #456
- phpcs very slow #440
- Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined #254
- .to\(file\) does not mute STDIO output #146
- Escaping shell arguments to exec() #143
- Allow multiple string arguments for exec() #103
- cp does not recursively copy from readonly location #98
- Handling permissions errors on file I/O #64
Merged pull requests:
- Add test case for sed on empty file #904 (wyardley)
- refactor: don't expose tempdir in common.state #903 (nfischer)
- chore(ci): fix codecov on travis #897 (nfischer)
- chore(npm): add ci-or-install script #896 (nfischer)
- Fix silent exec #892 (nfischer)
- chore(appveyor): run entire test matrix #886 (nfischer)
- docs: remove gitter badge #880 (nfischer)
- grep includes the i flag #876 (ppsleep)
- Fix(which): match only executable files (#657) #874 (termosa)
- chore: rename some tests #871 (nfischer)
- Fix cp from readonly source #870 (nfischer)
- chore: bump dev dependencies and add package-lock #864 (nfischer)
- fix(mocks): fix conflict between mocks and skip #863 (nfischer)
- chore: output npm version in travis #850 (nfischer)
- Prevent require-ing bin/shjs #848 (freitagbr)
- chore(appveyor): do not use latest npm #847 (nfischer)
- chore: update shelljs-release version #846 (nfischer)