[Snyk] Upgrade express from 4.18.1 to 4.18.2

[eufelipemateus]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade express from 4.18.1 to 4.18.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 22 days ago, on 2022-10-08.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Sandbox Bypass SNYK-JS-VM2-3018201	495/1000 Why? CVSS 9.9	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	495/1000 Why? CVSS 9.9	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: express

• 4.18.2 - 2022-10-08
  
  • Fix regression routing a large stack in a single route
  • deps: body-parser@1.20.1
    • deps: qs@6.11.0
    • perf: remove unnecessary object clone
  • deps: qs@6.11.0
• 4.18.1 - 2022-04-29
  
  • Fix hanging on large stack of sync routes

from express GitHub release notes

Commit messages

Package name: express

• 8368dc1 4.18.2
• 61f4049 docs: replace Freenode with Libera Chat
• bb7907b build: Node.js@18.10
• f56ce73 build: supertest@6.3.0
• 24b3dc5 deps: qs@6.11.0
• 689d175 deps: body-parser@1.20.1
• 340be0f build: eslint@8.24.0
• 33e8dc3 docs: use Node.js name style
• 644f646 build: supertest@6.2.4
• ecd7572 build: Node.js@14.20
• 97131bc build: Node.js@18.7
• 8d98e86 build: Node.js@16.17
• 2c47827 examples: remove unused function arguments in params
• 97f0a51 tests: verify all handlers called in stack tests
• 7ec5dd2 Fix regression routing a large stack in a single route
• ab2c70b build: Node.js@18.1
• 745a63f build: ejs@3.1.8
• a2dfc56 build: mocha@10.0.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs