8000 Update dependency ua-parser-js to v0.7.24 [SECURITY] by renovate[bot] · Pull Request #4216 · thelounge/thelounge · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Update dependency ua-parser-js to v0.7.24 [SECURITY] #4216

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
May 7, 2021
Merged

Update dependency ua-parser-js to v0.7.24 [SECURITY] #4216

merged 1 commit into from
May 7, 2021

Conversation

renovate[bot]
Copy link
Contributor
@renovate renovate bot commented May 6, 2021 •
edited
Loading

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
ua-parser-js 0.7.23 -> 0.7.24 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-27292

ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.

Release Notes

faisalman/ua-parser-js

v0.7.24

Compare Source

Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.

@renovate renovate bot added the Type: Security Security concern or PRs that must be reviewed with extra care regarding security. label May 6, 2021
@renovate renovate bot force-pushed the renovate/npm-ua-parser-js-vulnerability branch from 9adaa67 to e02e8af Compare May 6, 2021 23:27
@renovate renovate bot force-pushed the renovate/npm-ua-parser-js-vulnerability branch from e02e8af to a985d76 Compare May 7, 2021 02:13
@MaxLeiter MaxLeiter merged commit 7b1cb88 into master May 7, 2021
@MaxLeiter MaxLeiter deleted the renovate/npm-ua-parser-js-vulnerability branch May 7, 2021 02:19
@MaxLeiter MaxLeiter added this to the 4.3.0 milestone Jun 29, 2021
@MaxLeiter MaxLeiter mentioned this pull request Nov 23, 2021
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
Type: Security Security concern or PRs that must be reviewed with extra care regarding security.
Projects
None yet
Milestone
4.3.0
Development

Successfully merging this pull request may close these issues.
2 participants
@MaxLeiter @renovate-bot
0