Lalaps Dashboard #92
Comments
pustovitDmytro
pushed a commit
that referenced
this issue
Feb 7, 2023
| datasource | package | from | to | | ---------- | ---------------------- | ------ | ------ | | npm | @commitlint/cli | 16.1.0 | 17.2.0 | | npm | @commitlint/lint | 16.0.0 | 17.2.0 | | npm | eslint-plugin-markdown | 2.2.1 | 3.0.0 | | npm | eslint-plugin-unicorn | 40.1.0 | 44.0.2 | | npm | husky | 7.0.4 | 8.0.2 | | npm | mocha | 9.2.0 | 10.1.0 | | npm | uuid | 8.3.2 | 9.0.0 | Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
pustovitDmytro
pushed a commit
that referenced
this issue
Feb 7, 2023
## [2.2.1](v2.2.0...v2.2.1) (2023-02-07) ### Chore * anti-terrorism disclaimer ([96327fe](96327fe)) * drop extra coverage options ([04f7668](04f7668)) * fixes eslint-plugin-unicorn version ([dd45e9a](dd45e9a)) * fixes npm audit ([0500470](0500470)) * fixes some npm audit vulnerabilities ([b913fee](b913fee)) * increase ava timeout ([8c64b59](8c64b59)) * Lock file maintenance ([85b7c09](85b7c09)) * Update dependency danger to v11 ([1779a27](1779a27)) * Update devDependencies (non-major) ([01bd6c0](01bd6c0)) * Update devDependencies (non-major) ([85a0161](85a0161)) * Update devDependencies (non-major) (#66) ([69aac8f](69aac8f)), closes [#66](#66) * Update devDependencies (non-major) (#92) ([f492769](f492769)), closes [#92](#92) ### Docs * drop lgtm ([b1841f2](b1841f2)) * update logo ([bebc92b](bebc92b)) * update year in license ([64521cb](64521cb))
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This issue provides visibility into Lalaps updates and their statuses.
npm
decode-uri-component vulnerable to Denial of Service (DoS)
Library:
decode-uri-componentAffected versions:
<=0.2.0Severity: low
Root Libraries:
dangerExposure of Sensitive Information to an Unauthorized Actor in follow-redirects
Library:
follow-redirectsAffected versions:
<1.14.8Severity: moderate
✔️ #138
✔️ #139
Root Libraries:
Got allows a redirect to a UNIX socket
Library:
gotAffected versions:
<11.8.5Severity: moderate
✔️ #138
✔️ #139
Root Libraries:
json-serverChore: fixes some npm audit vulnerabilities #138 Chore: fixes some npm audit vulnerabilities #139minimatch ReDoS vulnerability
Library:
minimatchAffected versions:
<3.0.5Severity: high
Root Libraries:
mochaChore: fixes some npm audit vulnerabilities #138 Chore: fixes some npm audit vulnerabilities #139Packing does not respect root-level ignore files in workspaces
Library:
npmAffected versions:
>=7.9.0 <8.11.0Severity: high
✔️ #138
✔️ #139
Root Libraries:
Authorization Bypass in parse-path
Library:
parse-pathAffected versions:
<5.0.0Severity: high
Root Libraries:
Cross site scripting in parse-url
Library:
parse-urlAffected versions:
<6.0.1Severity: moderate
✔️ #138
✔️ #139
Root Libraries:
Exposure of Sensitive Information to an Unauthorized Actor in semantic-release
Library:
semantic-releaseAffected versions:
>=17.0.4 <19.0.3Severity: moderate
✔️ #138
✔️ #139
Root Libraries:
semantic-releaseChore: fixes some npm audit vulnerabilities #138 Chore: fixes some npm audit vulnerabilities #139Regular expression denial of service in semver-regex
Library:
semver-regexAffected versions:
<3.1.4Severity: low
✔️ #138
✔️ #139
Root Libraries:
Last Updated: 01 Dec 2022, at 01:29 UTC
The text was updated successfully, but these errors were encountered: