Skip to content

chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned#232

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/npm-undefsafe-vulnerability
Open

chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned#232
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/npm-undefsafe-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Mar 7, 2022

Copy link
Copy Markdown
Contributor

Mend Renovate

This PR contains the following updates:

Package Change
undefsafe 2.0.2 -> 2.0.3

GitHub Vulnerability Alerts

CVE-2019-10795

undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@codecov

codecov Bot commented Mar 7, 2022

Copy link
Copy Markdown

Codecov Report

Merging #232 (16d8b70) into master (d6acbe3) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff            @@
##            master      #232   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines           21        21           
  Branches         2         2           
=========================================
  Hits            21        21           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d6acbe3...16d8b70. Read the comment docs.

@renovate renovate Bot changed the title chore(deps): update dependency undefsafe to 2.0.3 [security] chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned Mar 24, 2023
@renovate

renovate Bot commented Mar 24, 2023

Copy link
Copy Markdown
Contributor Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@renovate renovate Bot changed the title chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned chore(deps): update dependency undefsafe to 2.0.3 [security] Mar 24, 2023
@renovate renovate Bot changed the title chore(deps): update dependency undefsafe to 2.0.3 [security] chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned Mar 25, 2023
@renovate renovate Bot changed the title chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned chore(deps): update dependency undefsafe to 2.0.3 [security] Mar 25, 2023
@renovate renovate Bot changed the title chore(deps): update dependency undefsafe to 2.0.3 [security] chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned Mar 25, 2023
@renovate renovate Bot changed the title chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned chore(deps): update dependency undefsafe to 2.0.3 [security] Mar 25, 2023
@renovate renovate Bot changed the title chore(deps): update dependency undefsafe to 2.0.3 [security] chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned Mar 25, 2023
@renovate renovate Bot changed the title chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned chore(deps): update dependency undefsafe to 2.0.3 [security] Mar 25, 2023
@renovate renovate Bot changed the title chore(deps): update dependency undefsafe to 2.0.3 [security] chore(deps): update dependency undefsafe to 2.0.3 [security] - abandoned Mar 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant