[Snyk] Upgrade cassandra-driver from 4.5.2 to 4.6.3

[snyk-bot]

Snyk has created this PR to upgrade cassandra-driver from 4.5.2 to 4.6.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released a year ago, on 2021-05-19.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Directory Traversal SNYK-JS-ADMZIP-1065796	584/1000 Why? Has a fix available, CVSS 7.4	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: cassandra-driver

• 4.6.3 - 2021-05-19
  

  4.6.3

• 4.6.2 - 2021-03-30
  

  4.6.2

• 4.6.1 - 2020-11-25
  

  version 4.6.1

• 4.6.0 - 2020-08-11
  

  Version bump

• 4.5.2 - 2020-05-07
  

  Version bump to 4.5.2

from cassandra-driver GitHub release notes

Commit messages

Package name: cassandra-driver

• 708bda5 4.6.3
• 7cad6c3 Another missed CHANGELOG update
• 6c46157 Missed changelog update
• 477ad22 Downgrade conn for C* connections with versions beyond what we support (#379)
• ef0e676 Re-resolve contact points after total disconnect (#378)
• 7f80bfd Jenkinsfile: fix expression to execute examples
• 93ad444 version bump 4.6.2
• 54d2141 Merge pull request #375 from LoraBard/fix-snyk-issues
• 3cb9ae0 fix: snyk fixed
• fe7b965 Version bump to 4.6.1
• b85965d Merge pull request #373 from leitethi/hotfix/batch-custom-mapper
• 52aa6d9 pass mapping information to model batch item in order to be able to parse custom mappings
• 1b62fc4 Version bump
• ecf0a74 Minor test fix
• 5357496 Expose AllowListPolicy and deprecate WhiteListPolicy
• 51f6a8b Mapper: clarify error message when mapping info not found
• 428f728 TypeScript: ResultSet extends AsyncIterable<Row>
• 3edf1af Support transforming column values in the Mapper
• ceb29dc Support DSE auth transitional mode
• b11a515 Merge branch '4.5'
• 413ef0c Fix doc typo
• 8ca57ec Merge branch '4.5'
• a95a7d9 Document Duration data type support
• 3d3596f Bump lodash from 4.17.15 to 4.17.19 (#367)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs