[Snyk] Upgrade mssql from 6.2.0 to 6.3.2

[snyk-bot]

Snyk has created this PR to upgrade mssql from 6.2.0 to 6.3.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2021-05-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Command Injection SNYK-JS-AZUREMSRESTNODEAUTH-1245464	497/1000 Why? Proof of Concept exploit, CVSS 7.8	Proof of Concept
	Prototype Pollution SNYK-JS-AJV-584908	497/1000 Why? Proof of Concept exploit, CVSS 7.8	No Known Exploit
	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	497/1000 Why? Proof of Concept exploit, CVSS 7.8	No Known Exploit
	Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	497/1000 Why? Proof of Concept exploit, CVSS 7.8	Proof of Concept
	Server-Side Request Forgery (SSRF) SNYK-JS-AXIOS-1038255	497/1000 Why? Proof of Concept exploit, CVSS 7.8	Proof of Concept
	Insecure Encryption SNYK-JS-REQUEST-1314897	497/1000 Why? Proof of Concept exploit, CVSS 7.8	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mssql

• 6.3.2 - 2021-05-13
  

  [fix] Bump various dependencies for security fixes

• 6.3.1 - 2021-01-01
  

  [fix] Ensure line endings are unix style (LF)

• 6.3.0 - 2020-12-14
• 6.2.3 - 2020-09-25
• 6.2.2 - 2020-09-18
• 6.2.1 - 2020-07-22
• 6.2.0 - 2020-03-13

from mssql GitHub release notes

Commit messages

Package name: mssql

• 6fe5d50 6.3.2
• 187232c Merge branch '5' into 6
• 921fc4a v5.1.5
• 8be3486 Bump deps
• f60374b Merge pull request #1201 from dhensby/pulls/6/dep-bump
• d5f6c31 Merge branch '5' into pulls/6/dep-bump
• d24745b Merge pull request #1200 from dhensby/pulls/dep-bump
• 671362a Bump outdated deps
• 375419b 6.3.1
• 6686c45 Merge branch '5' into 6
• 01bc08f changelog
• 38096d8 5.1.4
• 41abc02 Merge branch '5' into 6
• acb84e1 Ensure lf line endings in files
• e45c0ae 6.3.0
• 49cce56 Update changelog
• 1d9ac35 Bump dependencies
• 9b67024 Merge pull request #1145 from dhensby/pulls/6/msnode-termination
• 9258e72 Handle issue where queries can be terminated before all the errors come through
• bb69fd4 Update changelog v6.3.0
• 3d8c4fa Merge pull request #1110 from dhensby/pulls/msnodesql-v1
• ca0144b Merge pull request #1138 from mastodon0/geo-parsing
• b6c0e12 fix geography v2 parsing
• 8d57a01 Merge pull request #1130 from mtriff/6

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs