The typescript-fp from kfang

Success.map and Success.flatmap on the Try object should catch errors an convert them to Failures

I'm submitting a ...
[x] bug report
[ ] feature request
[ ] question about the decisions made in the repository
[ ] question about how to use this project
Summary
I would like to be able to do

Try.of(() => "some value")
  .map((s) => {
    if (!validate(s)) {
      throw new Error();
    }
    return s;
  });

and have it properly convert to a Failure object instead of throwing

Other information (e.g. detailed explanation, stacktraces, related issues, suggestions how to fix, links for us to have context, eg. StackOverflow, personal fork, etc.)

CVE-2021-43138 (High) detected in async-2.6.3.tgz - autoclosed

CVE-2021-43138 - High Severity Vulnerability

Vulnerable Library - async-2.6.3.tgz

Higher-order functions and common patterns for asynchronous code

Library home page: https://registry.npmjs.org/async/-/async-2.6.3.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/async/package.json

Dependency Hierarchy:

gh-pages-3.2.3.tgz (Root Library)
- ❌ async-2.6.3.tgz (Vulnerable Library)

Found in base branch: master

Vulnerability Details

In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.

Publish Date: 2022-04-06

URL: CVE-2021-43138

CVSS 3 Score Details (7.8)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2021-43138

Release Date: 2022-04-06

Fix Resolution (async): 2.6.4

Direct dependency fix Resolution (gh-pages): 4.0.0

Step up your Open Source Security Game with Mend here

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	`npm-run-all`

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

chore(deps): Update all non-major dependencies (@types/jest, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint, ts-jest, ts-node, typedoc, typescript)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Detected dependencies

github-actions

.github/workflows/publish.yml

actions/checkout v3

actions/setup-node v3

.github/workflows/test.yml

actions/checkout v3

actions/setup-node v3

npm

package.json

@tsconfig/node14 ^1.0.3

@types/jest ^29.5.5

@types/node ^14.18.32

@typescript-eslint/eslint-plugin ^6.7.5

@typescript-eslint/parser ^6.7.5

eslint ^8.51.0

gh-pages ^4.0.0

jest ^29.7.0

npm-run-all ^4.1.5

semantic-release ^19.0.5

ts-jest ^29.1.1

ts-node ^10.9.1

typedoc ^0.25.2

typescript ^5.2.2

nvm

.nvmrc

Check this box to trigger a request for Renovate to run again on this repository

CVE-2021-35065 (High) detected in glob-parent-5.1.2.tgz - autoclosed

CVE-2021-35065 - High Severity Vulnerability

Vulnerable Library - glob-parent-5.1.2.tgz

Extract the non-magic parent path from a glob string.

Library home page: https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/glob-parent/package.json

Dependency Hierarchy:

parser-5.18.0.tgz (Root Library)
- typescript-estree-5.18.0.tgz
  - globby-11.1.0.tgz
    - fast-glob-3.2.11.tgz
      - ❌ glob-parent-5.1.2.tgz (Vulnerable Library)

Found in base branch: master

Vulnerability Details

The package glob-parent before 6.0.1 are vulnerable to Regular Expression Denial of Service (ReDoS)

Publish Date: 2021-06-22

URL: CVE-2021-35065

CVSS 3 Score Details (7.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-cj88-88mr-972w

Release Date: 2021-06-22

Fix Resolution (glob-parent): 6.0.1

Direct dependency fix Resolution (@typescript-eslint/parser): 5.19.0

Step up your Open Source Security Game with Mend here

kfang / typescript-fp Goto Github PK

typescript-fp's People

Contributors

Stargazers

Watchers

Forkers

typescript-fp's Issues

Success.map and Success.flatmap on the Try object should catch errors an convert them to Failures

CVE-2021-43138 (High) detected in async-2.6.3.tgz - autoclosed

CVE-2021-43138 - High Severity Vulnerability

Dependency Dashboard

Edited/Blocked

Open

Detected dependencies

CVE-2021-35065 (High) detected in glob-parent-5.1.2.tgz - autoclosed

CVE-2021-35065 - High Severity Vulnerability

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent