🚨 You need to enable Continuous Integration on Greenkeeper branches of this repository. 🚨

To enable Greenkeeper, you need to make sure that a commit status is reported on all branches. This is required by Greenkeeper because it uses your CI build statuses to figure out when to notify you about breaking changes.

Since we didn’t receive a CI status on the greenkeeper/initial branch, it’s possible that you don’t have CI set up yet. We recommend using Travis CI, but Greenkeeper will work with every other CI service as well.

If you have already set up a CI for this repository, you might need to check how it’s configured. Make sure it is set to run on all new branches. If you don’t want it to run on absolutely every branch, you can whitelist branches starting with greenkeeper/.

Once you have installed and configured CI on this repository correctly, you’ll need to re-trigger Greenkeeper’s initial pull request. To do this, please click the 'fix repo' button on account.greenkeeper.io.

Vulnerabilities

DepShield reports that this application's usage of mime:1.3.4 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

mime:1.3.4 is a transitive dependency introduced by the following direct dependency(s):

• express:4.13.4
        └─ send:0.13.1
              └─ mime:1.3.4
        └─ serve-static:1.10.3
              └─ send:0.13.2
                    └─ mime:1.3.4

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dependency cookie-parser to v1.4.6
• Update dependency serve-favicon to v2.5.0
• Update dependency debug to v4

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency pug to v3.0.2
• Update dependency body-parser to v1.20.2
• Update dependency express to v4.18.2
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

npm

package.json

• body-parser 1.15.2
• cookie-parser 1.4.4
• debug 2.6.9
• express 4.13.4
• pug 3.0.1
• morgan 1.10.0
• serve-favicon 2.3.2

---

• Check this box to trigger a request for Renovate to run again on this repository

Vulnerabilities

DepShield reports that this application's usage of qs:4.0.0 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2017-1000048] Improper Input Validation

---

Occurrences

qs:4.0.0 is a transitive dependency introduced by the following direct dependency(s):

• express:4.13.4
        └─ qs:4.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of debug:2.2.0 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

debug:2.2.0 is a transitive dependency introduced by the following direct dependency(s):

• body-parser:1.15.2
        └─ debug:2.2.0

• debug:2.2.0

• express:4.13.4
        └─ debug:2.2.0
        └─ finalhandler:0.4.1
              └─ debug:2.2.0
        └─ send:0.13.1
              └─ debug:2.2.0
        └─ serve-static:1.10.3
              └─ send:0.13.2
                    └─ debug:2.2.0

• morgan:1.7.0
        └─ debug:2.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of qs:6.2.0 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2017-1000048] Improper Input Validation

---

Occurrences

qs:6.2.0 is a transitive dependency introduced by the following direct dependency(s):

• body-parser:1.15.2
        └─ qs:6.2.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of fresh:0.3.0 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

fresh:0.3.0 is a transitive dependency introduced by the following direct dependency(s):

• express:4.13.4
        └─ fresh:0.3.0
        └─ send:0.13.1
              └─ fresh:0.3.0
        └─ serve-static:1.10.3
              └─ send:0.13.2
                    └─ fresh:0.3.0

• serve-favicon:2.3.2
        └─ fresh:0.3.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of constantinople:3.0.2 results in the following vulnerability(s):

• (CVSS 8.8) CWE-94: Improper Control of Generation of Code ('Code Injection')

---

Occurrences

constantinople:3.0.2 is a transitive dependency introduced by the following direct dependency(s):

• jade:1.11.0
        └─ constantinople:3.0.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

The project could not be analyzed because of build errors. Please review the error messages here. Another build will be scheduled within 24 hours. If the build is successful this issue will be closed, otherwise the error message will be updated.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of uglify-js:2.2.5 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2015-8857] The uglify-js package before 2.4.24 for Node.js does not properly account for no...
• (CVSS 8.3) CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
• (CVSS 7.5) [CVE-2015-8858] Resource Management Errors
• (CVSS 5.3) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

uglify-js:2.2.5 is a transitive dependency introduced by the following direct dependency(s):

• jade:1.11.0
        └─ transformers:2.1.0
              └─ uglify-js:2.2.5

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}