Versions of mem prior to 4.0.0 are vulnerable to Denial of Service (DoS). The package fails to remove old values from the cache even after a value passes its maxAge property. This may allow attackers to exhaust the system's memory if they are able to abuse the application logging.
Recommendation
Upgrade to version 4.0.0 or later.
Configuration
📅 Schedule: "" in timezone Europe/London.
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, click this checkbox.
This PR contains the following updates:
1.1.0->4.0.0:information_source: Find our documentation at https://github.com/Financial-Times/next/wiki/Renovate.
GitHub Vulnerability Alerts
GHSA-4xcv-9jjx-gfj3
Versions of
memprior to 4.0.0 are vulnerable to Denial of Service (DoS). The package fails to remove old values from the cache even after a value passes itsmaxAgeproperty. This may allow attackers to exhaust the system's memory if they are able to abuse the application logging.Recommendation
Upgrade to version 4.0.0 or later.
Configuration
📅 Schedule: "" in timezone Europe/London.
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.