[Snyk] Security upgrade bcrypt from 2.0.1 to 5.0.1
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
Changes included in this Merge Request
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- server/package.json
- server/package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: bcrypt
The new version differs by 156 commits.- 2f124bd Fix artifact upload path
- 10eacf5 Prepare v5.0.1
- 6eacfe1 Merge pull request #856 from kelektiv/update-deps
- feb477c Update node-pre-gyp to 1.0.0
- 42c8b0c Merge pull request #852 from kelektiv/update-deps
- bafefc3 Update packages
- 7c5d8df Merge pull request #851 from recrsn/node-15-ci
- 1ba55f9 Add Node 15 to CI
- 19c06c1 Update Node version compatibility info
- 09cb4fc Merge pull request #825 from dogon11/patch-1
- 2821c03 Merge pull request #811 from techhead/use_buffers
- 63c8403 Merge pull request #838 from alete89/docs/improve-hash-info
- 984ef18 remove reference to $2y$ algo identifier
- 630c897 fixes: #828
- 0f93284 README.md typo fix
- 4125ebc Update README.md
- f503e57 Create SECURITY.md
- f158e6e Allow optional use of Node Buffers.
- 8866277 Deploy on any travis tag
- 61139e6 v5.0.0
- 1bde62c Update node-pre-gyp to 0.15.0
- 40770d6 Add NodeJS 14 to appveyor CI
- 5916a46 Merge pull request #807 from techhead/known_length
- f28e916 Reword comment
Check the changes in this Merge Request to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 
🧐 View latest project report
Learn how to fix vulnerabilities with free interactive lessons: