Mend ensures you have the greatest risk reduction (highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.
By merging this PR, the number of vulnerabilities in issue #12 will be resolved in part or in full.
---
### Release Notes
cthackers/adm-zip
### [`v0.4.9`](https://togithub.com/cthackers/adm-zip/blob/HEAD/history.md#049--2018-04-25)
[Compare Source](https://togithub.com/cthackers/adm-zip/compare/v0.4.8...v0.4.9)
\==================
- Update package.json (The Brain)
- Update README.md (The Brain)
- fix: resolve both target and entry path (Danny Grander)
### [`v0.4.8`](https://togithub.com/cthackers/adm-zip/blob/HEAD/history.md#048--2018-04-23)
[Compare Source](https://togithub.com/cthackers/adm-zip/compare/v0.4.7...v0.4.8)
\==================
- Update package.json (The Brain)
- Update package.json (The Brain)
- Update package.json (The Brain)
- fix: prevent extracting archived files outside of target path (Aviad Reich)
- add try-catch around fs.writeSync (olya)
- Fix data accessing example in README (Philipp Muens)
- Remove buffers `noAssert` argument (Ruben Bridgewater)
- Fix license expression to be compatible to SPDX. (Golo Roden)
- Added travis ci support (Amila Welihinda)
- add bug fix on special character in filename that are allowed in linux but not in windows (Ygal Bellaiche)
- Change project name for publishing to npm (David Kadlecek)
- Added support for electron original-fs (David Kadlecek)
- fixed [#130](https://togithub.com/cthackers/adm-zip/issues/130): ensure buffer (lloiser)
- fix Issue: [https://github.com/cthackers/adm-zip/issues/102](https://togithub.com/cthackers/adm-zip/issues/102) (mygoare)
- Update license attribute (Peter deHaan)
- lowcase for the function name (Changyu Geng)
- Add a test function (Changyu Geng)
- Under windows, the path should be normalize first, otherwise the localPath will still use back slash (Shauk Wu)
- Update adm-zip.js (MikeNerevarin)
- Fix adm-zip.addFile default attributes for files and directories (Pavel Strashkin)
- Fixed CRC bug (The Brain)
---
- [ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
0.4.7
->0.4.9
Version 0.4.9
| Risk Change | Critical | High | Medium | Low | | --- | --- | --- | --- | --- | | -100% | 0 (--) | 0 (--) | 0 (-1 ) | 0 (--) |Version 0.4.7
| Risk Change | Critical | High | Medium | Low | | --- | --- | --- | --- | --- | | N/A | 0 | 0 | 1 | 0 |Version 0.5.9
| Risk Change | Critical | High | Medium | Low | | --- | --- | --- | --- | --- | | -100% | 0 (--) | 0 (--) | 0 (-1 ) | 0 (--) |By merging this PR, the number of vulnerabilities in issue #12 will be resolved in part or in full.
--- ### Release Notes
---
- [ ] If you want to rebase/retry this PR, check this box
cthackers/adm-zip
### [`v0.4.9`](https://togithub.com/cthackers/adm-zip/blob/HEAD/history.md#049--2018-04-25) [Compare Source](https://togithub.com/cthackers/adm-zip/compare/v0.4.8...v0.4.9) \================== - Update package.json (The Brain) - Update README.md (The Brain) - fix: resolve both target and entry path (Danny Grander) ### [`v0.4.8`](https://togithub.com/cthackers/adm-zip/blob/HEAD/history.md#048--2018-04-23) [Compare Source](https://togithub.com/cthackers/adm-zip/compare/v0.4.7...v0.4.8) \================== - Update package.json (The Brain) - Update package.json (The Brain) - Update package.json (The Brain) - fix: prevent extracting archived files outside of target path (Aviad Reich) - add try-catch around fs.writeSync (olya) - Fix data accessing example in README (Philipp Muens) - Remove buffers `noAssert` argument (Ruben Bridgewater) - Fix license expression to be compatible to SPDX. (Golo Roden) - Added travis ci support (Amila Welihinda) - add bug fix on special character in filename that are allowed in linux but not in windows (Ygal Bellaiche) - Change project name for publishing to npm (David Kadlecek) - Added support for electron original-fs (David Kadlecek) - fixed [#130](https://togithub.com/cthackers/adm-zip/issues/130): ensure buffer (lloiser) - fix Issue: [https://github.com/cthackers/adm-zip/issues/102](https://togithub.com/cthackers/adm-zip/issues/102) (mygoare) - Update license attribute (Peter deHaan) - lowcase for the function name (Changyu Geng) - Add a test function (Changyu Geng) - Under windows, the path should be normalize first, otherwise the localPath will still use back slash (Shauk Wu) - Update adm-zip.js (MikeNerevarin) - Fix adm-zip.addFile default attributes for files and directories (Pavel Strashkin) - Fixed CRC bug (The Brain)