Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(deps): update dependency debug to ~2.6.9 [security] #26

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update dependency debug to ~2.6.9 [security] #26

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Mar 18, 2023 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
debug ~2.2.0 -> ~2.6.9 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2017-20165

A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The name of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability. The patch has been backported to the 2.6.x branch in version 2.6.9.

Release Notes

debug-js/debug (debug)

v2.6.9

Compare Source

Patches
  • Remove ReDoS regexp in %o formatter: #​504
Credits

Huge thanks to @​zhuangya for their help!

v2.6.8

Compare Source

v2.6.7

Compare Source

v2.6.6

Compare Source

v2.6.5

Compare Source

v2.6.4

Compare Source

v2.6.3

Compare Source

v2.6.2

Compare Source

v2.6.1

Compare Source

v2.6.0

Compare Source

v2.5.2

Compare Source

v2.5.1

Compare Source

v2.5.0

Compare Source

v2.4.5

Compare Source

v2.4.4

Compare Source

v2.4.3

Compare Source

v2.4.2

Compare Source

v2.4.1

Compare Source

v2.4.0

Compare Source

v2.3.3

Compare Source

v2.3.2

Compare Source

v2.3.1

Compare Source

v2.3.0

Compare Source

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Mar 27, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 802ffd7 to 134ac73 Compare March 27, 2023 17:14
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] May 29, 2023
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jun 2, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from b718b6d to c595a95 Compare June 2, 2023 02:22
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from c595a95 to 3cf46f8 Compare June 9, 2023 05:47
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jun 9, 2023
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jun 10, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 3cf46f8 to 9ba7dbc Compare June 10, 2023 11:49
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jun 13, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 9ba7dbc to 9024c77 Compare June 13, 2023 20:59
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jun 16, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 9024c77 to 36968d4 Compare June 16, 2023 02:50
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jun 18, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 36968d4 to 1bb1167 Compare June 18, 2023 11:50
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jun 22, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 1bb1167 to ab59577 Compare June 22, 2023 23:33
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jun 29, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from ab59577 to d2cf4cb Compare June 29, 2023 23:36
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jun 30, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from d2cf4cb to 0b9906e Compare June 30, 2023 17:52
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jul 7, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 0b9906e to 46f06db Compare July 7, 2023 23:42
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jul 8, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 46f06db to 0d46830 Compare July 8, 2023 05:25
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jul 10, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 0d46830 to 2060bb8 Compare July 10, 2023 05:54
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jul 11, 2023
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 2060bb8 to d23a5f8 Compare July 11, 2023 23:53
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jul 17, 2023
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] May 25, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 7718f9e to 8bdda38 Compare June 6, 2024 02:30
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jun 6, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 8bdda38 to c97b1d5 Compare June 7, 2024 05:18
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jun 7, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from c97b1d5 to a1ec5f9 Compare June 28, 2024 05:38
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jun 28, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from a1ec5f9 to f9bb61f Compare June 29, 2024 11:46
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jun 29, 2024
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jul 15, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch 2 times, most recently from d745741 to 32d89e7 Compare July 17, 2024 23:50
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jul 17, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 32d89e7 to 8b248b4 Compare July 21, 2024 17:54
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jul 21, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 8b248b4 to 003065c Compare July 24, 2024 02:35
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jul 24, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 003065c to 9e909c5 Compare July 29, 2024 05:24
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Jul 29, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 9e909c5 to 94c3088 Compare July 30, 2024 02:02
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Jul 30, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 94c3088 to 5400ef5 Compare October 10, 2024 05:27
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Oct 10, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from 5400ef5 to c8052cc Compare October 13, 2024 10:52
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Oct 13, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from c8052cc to df68cd7 Compare October 30, 2024 08:44
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.9 [security] fix(deps): update dependency debug to ~2.6.0 [security] Oct 30, 2024
@renovate renovate bot changed the title fix(deps): update dependency debug to ~2.6.0 [security] fix(deps): update dependency debug to ~2.6.9 [security] Oct 31, 2024
@renovate renovate bot force-pushed the renovate/npm-debug-vulnerability branch from df68cd7 to e2356c4 Compare October 31, 2024 20:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants