Skip to content

chore(deps): update dependency path-parse to 1.0.7 [security] - abandoned - autoclosed#74

Closed
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-path-parse-vulnerability
Closed

chore(deps): update dependency path-parse to 1.0.7 [security] - abandoned - autoclosed#74
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-path-parse-vulnerability

Conversation

@renovate
Copy link

@renovate renovate bot commented Nov 23, 2021

WhiteSource Renovate

This PR contains the following updates:

Package Change
path-parse 1.0.6 -> 1.0.7

GitHub Vulnerability Alerts

CVE-2021-23343

Affected versions of npm package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.


Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.

@coveralls
Copy link

Coverage Status

Coverage remained the same at 85.163% when pulling 3671e50 on renovate/npm-path-parse-vulnerability into 481b05b on master.

@renovate renovate bot changed the title chore(deps): update dependency path-parse to 1.0.7 [security] chore(deps): update dependency path-parse to 1.0.7 [security] - abandoned Jun 1, 2023
@renovate
Copy link
Author

renovate bot commented Jun 1, 2023

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@renovate renovate bot changed the title chore(deps): update dependency path-parse to 1.0.7 [security] - abandoned chore(deps): update dependency path-parse to 1.0.7 [security] - abandoned - autoclosed Sep 1, 2024
@renovate renovate bot closed this Sep 1, 2024
@renovate renovate bot deleted the renovate/npm-path-parse-vulnerability branch September 1, 2024 11:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants