[Snyk] Upgrade pify from 2.3.0 to 6.0.0 #7

snyk-bot · 2022-08-20T20:43:11Z

Snyk has created this PR to upgrade pify from 2.3.0 to 6.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 5 versions ahead of your current version.
The recommended version was released 2 months ago, on 2022-06-06.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) npm:underscore.string:20170908	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-174125	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Arbitrary File Write SNYK-JS-TAR-1579155	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-SETVALUE-450213	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-1540541	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-450213	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-1540541	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MIXINDEEP-450212	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-INI-1048974	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Arbitrary Code Execution SNYK-JS-ESLINTUTILS-460220	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Remote Memory Exposure SNYK-JS-BL-608877	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-AJV-584908	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Time of Check Time of Use (TOCTOU) npm:chownr:20180731	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-559764	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-559764	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Validation Bypass SNYK-JS-KINDOF-537849	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-JUSTEXTEND-72674	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: pify

6.0.0 - 2022-06-06
Breaking
- Require Node.js 14 1f1b077
- This package is now pure ESM. Please read this.
v5.0.0...v6.0.0
5.0.0 - 2020-02-14
Breaking
- Require Node.js 10 a6c20b3
Enhancements
- Implement using Proxy (#73) 57e9a04
  This means that it should work seamlessly in more cases as the promisified function is just a transparent wrapper around the original function.
v4.0.1...v5.0.0
4.0.1 - 2018-10-22
- Bring back support for promisifying prototype functions. It was accidentally left out in v4. bbe89b7
4.0.0 - 2018-08-09
Breaking:
- Require Node.js 6. 523bad9
Other:
- Check for invalid input. 9ef944c
3.0.0 - 2017-05-28
- Now requires Node.js 4.
- Made multiArgs option apply on rejections too. 30116d9
- Moved promiseModule argument into an option. 5f7259c
- Supports transforming inherited methods and bind methods to original object. 1701541
- Added option to support non-error-first APIs. fad7b3d
- Excludes methods ending in Stream by default. a2cec4c
v2.3.0...v3.0.0
2.3.0 - 2015-10-26
2.3.0