[Snyk] Upgrade mocha from 3.5.3 to 11.7.1 by snyk-io[bot] · Pull Request #27 · hashim21223445/eventsource

snyk-io · 2025-08-08T23:23:19Z

Snyk has created this PR to upgrade mocha from 3.5.3 to 11.7.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

The recommended version is 87 versions ahead of your current version.
The recommended version was released 2 months ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) npm:diff:20180305	88	Proof of Concept
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	88	No Known Exploit
Code Injection SNYK-JS-LODASH-1040724	88	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-450202	88	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	88	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	88	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-6139239	88	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-73638	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	88	Proof of Concept
Prototype Pollution SNYK-JS-MIXINDEEP-450212	88	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MOCHA-2863123	88	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MOCHA-561476	88	No Known Exploit
Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	88	No Known Exploit
Improper Verification of Cryptographic Signature SNYK-JS-BROWSERIFYSIGN-6037026	88	No Known Exploit
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	88	Proof of Concept
Open Redirect SNYK-JS-EXPRESS-6474509	88	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:debug:20170905	88	Proof of Concept
Command Injection npm:growl:20160721	88	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	88	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	88	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	88	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-559764	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	88	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	88	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	88	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	88	Proof of Concept
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	88	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577916	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	88	Proof of Concept
Generation of Predictable Numbers or Identifiers SNYK-JS-PBKDF2-10495496	88	Proof of Concept
Generation of Predictable Numbers or Identifiers SNYK-JS-PBKDF2-10495498	88	No Known Exploit
Prototype Poisoning SNYK-JS-QS-3153490	88	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577917	88	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577918	88	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8172694	88	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ES5EXT-6095076	88	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-1540541	88	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-450213	88	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-1540541	88	Proof of Concept
Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	88	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-567742	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	88	Proof of Concept
Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	88	No Known Exploit
Cross-site Scripting SNYK-JS-SEND-7926862	88	No Known Exploit
Information Exposure SNYK-JS-ELLIPTIC-8720086	88	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-450213	88	Proof of Concept
Prototype Pollution SNYK-JS-Y18N-1021887	88	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767	88	Proof of Concept
Prototype Pollution SNYK-JS-HANDLEBARS-173692	88	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-174183	88	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-469063	88	No Known Exploit
Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	88	Proof of Concept
Cross-site Scripting SNYK-JS-EXPRESS-7926867	88	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-1279029	88	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	88	Proof of Concept
Prototype Pollution SNYK-JS-JSONPOINTER-1577288	88	Proof of Concept
Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	88	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	88	Proof of Concept
Prototype Pollution SNYK-JS-HANDLEBARS-534988	88	No Known Exploit
Validation Bypass SNYK-JS-KINDOF-537849	88	Proof of Concept

Release notes

Package name: mocha

11.7.1 - 2025-06-24
11.7.1 (2025-06-24)

🩹 Fixes
- always fallback to import() if require() fails (#5384) (295c168)
🧹 Chores
- add esm loader test (#5383) (f58e49f)
11.7.0 - 2025-06-18
11.7.0 (2025-06-18)

🌟 Features
- use require to load esm (#5366) (41e24a2)
11.6.0 - 2025-06-09
11.6.0 (2025-06-09)

🌟 Features
- bump workerpool from ^6.5.1 to ^9.2.0 (#5350) (581a3c5)
11.5.0 - 2025-05-23
11.5.0 (2025-05-22)

🌟 Features
- bump mimimatch from ^5.1.6 to ^9.0.5 (#5349) (a3dea85)
11.4.0 - 2025-05-19
11.4.0 (2025-05-19)

🌟 Features
- bump diff from ^5.2.0 to ^7.0.0 (#5348) (554d6bb)
📚 Documentation
- added CHANGELOG.md note around 11.1 yargs-parser update (#5362) (618415d)
11.3.0 - 2025-05-16
11.3.0 (2025-05-16)

🌟 Features
- add option to use posix exit code upon fatal signal (#4989) (91bbf85)
📚 Documentation
- Deploy new site alongside old one (#5360) (6c96545)
- mention explicit browser support range (#5354) (c514c0b)
- update Node.js version requirements for 11.x (#5329) (abf3dd9)
🧹 Chores
- remove prerelease setting in release-please config (#5363) (8878f22)
11.2.2 - 2025-04-10
11.2.2 (2025-04-10)

🩹 Fixes
- deps: update chokidar to v4 (#5256) (8af0f1a)
📚 Documentation
- add ClientRedirects.astro (#5324) (b88d441)
- add example/tests.html to docs-next (#5325) (6ec5762)
11.2.1 - 2025-04-10
11.2.1 (2025-04-10)

🩹 Fixes
- switch from ansi-colors to picocolors (#5323) (7c08d09)
📚 Documentation
- fix new website typos, improve readability (#5312) (fbceb19)
🧹 Chores
- "force" Netlify to use npm to build new site (#5319) (3a46855)
- Fix tests (#5320) (18699a0)
11.2.0 - 2025-03-17
11.2.0 (2025-03-17)

🌟 Features
- enable reporters to show relative paths of tests (#5292) (81ea666)
📚 Documentation
- add instructions for API docs (#5287) (b720ec1)
- add new website using Astro Starlight (#5246) (b1f1cb7)
- improve third-party reporter docs (#5285) (c5a0ef5)
🧹 Chores
- enabled eslint-plugin-n (#5280) (945d6e3)
- pin node-lts tests to 22.11.0 (#5279) (664e1f4)
- replace fs-extra with newer fs built-ins (#5284) (75dcf8c)
11.1.0 - 2025-01-02
11.1.0 (2025-01-02)

🌟 Features
- bump yargs to 17 (#5165) (8f1c8d8)
  - Note that this also included a version bump of yargs-parser from ^20.2.9 to ^21.1., which fixed a bug that caused extra quotes in file paths to be removed.
    See #5341 for more information.
11.0.2 - 2024-12-09
11.0.1 - 2024-12-02
11.0.0 - 2024-11-11
11.0.0-beta - 2024-11-23
10.8.2 - 2024-10-30
10.8.1 - 2024-10-29
10.8.0 - 2024-10-29
10.7.3 - 2024-08-09
10.7.0 - 2024-07-20
10.6.1 - 2024-07-20
10.6.0 - 2024-07-02
10.5.2 - 2024-06-26
10.5.1 - 2024-06-25
10.5.0 - 2024-06-24
10.4.0 - 2024-03-26
10.3.0 - 2024-02-08
10.3.0-preminor.0 - 2024-01-30
10.2.0 - 2022-12-11
10.1.0 - 2022-10-15
10.0.0 - 2022-05-01
9.2.2 - 2022-03-11
9.2.1 - 2022-02-19
9.2.0 - 2022-01-24
9.1.4 - 2022-01-14
9.1.3 - 2021-10-15
9.1.2 - 2021-09-25
9.1.1 - 2021-08-28
9.1.0 - 2021-08-20
9.0.3 - 2021-07-25
9.0.2 - 2021-07-03
9.0.1 - 2021-06-18
9.0.0 - 2021-06-07
8.4.0 - 2021-05-07
8.3.2 - 2021-03-12
8.3.1 - 2021-03-06
8.3.0 - 2021-02-11
8.2.1 - 2020-11-02
8.2.0 - 2020-10-16
8.1.3 - 2020-08-28
8.1.2 - 2020-08-25
8.1.1 - 2020-08-04
8.1.0 - 2020-07-30
8.0.1 - 2020-06-10
8.0.0 - 2020-06-10
7.2.0 - 2020-05-23
7.1.2 - 2020-04-26
7.1.1 - 2020-03-18
7.1.0 - 2020-02-26
7.0.1 - 2020-01-26
7.0.0 - 2020-01-04
7.0.0-esm1 - 2020-01-12
6.2.3 - 2020-03-25
6.2.2 - 2019-10-18
6.2.1 - 2019-09-29
6.2.0 - 2019-07-18
6.1.4 - 2019-04-18
6.1.3 - 2019-04-12
6.1.2 - 2019-04-08
6.1.1 - 2019-04-07
6.1.0 - 2019-04-07
6.0.2 - 2019-02-25
6.0.1 - 2019-02-21
6.0.0 - 2019-02-18
6.0.0-1 - 2019-01-02
6.0.0-0 - 2019-01-01
5.2.0 - 2018-05-18
5.1.1 - 2018-04-18
5.1.0 - 2018-04-12
5.0.5 - 2018-03-23
5.0.4 - 2018-03-07
5.0.3 - 2018-03-07
5.0.2 - 2018-03-06
5.0.1 - 2018-02-13
5.0.0 - 2018-01-18
4.1.0 - 2017-12-29
4.0.1 - 2017-10-06
4.0.0 - 2017-10-03
3.5.3 - 2017-09-11

from mocha GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade mocha from 3.5.3 to 11.7.1. See this package in npm: mocha See this project in Snyk: https://app.snyk.io/org/hashimmohammad881-TrGTrpdUyGorMuF38nmW8P/project/e6715d82-c41b-4ec4-9520-3b5ae1a13f2e?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

semanticdiff-com · 2025-08-08T23:23:22Z

Review changes with

Changed Files

File	Status
package.json	0% smaller

snyk-io · 2025-08-08T23:23:32Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

Conversation

snyk-io Bot commented Aug 8, 2025

Snyk has created this PR to upgrade mocha from 3.5.3 to 11.7.1.

Issues fixed by the recommended upgrade:

11.7.1 (2025-06-24)

🩹 Fixes

🧹 Chores

11.7.0 (2025-06-18)

🌟 Features

11.6.0 (2025-06-09)

🌟 Features

11.5.0 (2025-05-22)

🌟 Features

11.4.0 (2025-05-19)

🌟 Features

📚 Documentation

11.3.0 (2025-05-16)

🌟 Features

📚 Documentation

🧹 Chores

11.2.2 (2025-04-10)

🩹 Fixes

📚 Documentation

11.2.1 (2025-04-10)

🩹 Fixes

📚 Documentation

🧹 Chores

11.2.0 (2025-03-17)

🌟 Features

📚 Documentation

🧹 Chores

11.1.0 (2025-01-02)

🌟 Features

Uh oh!

semanticdiff-com Bot commented Aug 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

snyk-io Bot commented Aug 8, 2025

🎉 Snyk checks have passed. No issues have been found so far.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

semanticdiff-com Bot commented Aug 8, 2025 •

edited

Loading