renovate[bot] commented 3 years ago

This PR contains the following updates:

Package	Change
url-parse	`1.5.1` -> `1.5.2`

GitHub Vulnerability Alerts

CVE-2021-3664

Overview

Affected versions of npm url-parse are vulnerable to URL Redirection to Untrusted Site.

Impact

Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior.

Configuration

📅 Schedule: "" in timezone Europe/Zurich.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.

github-actions[bot] commented 3 years ago

This PR will trigger no release when merged.

codecov[bot] commented 3 years ago

Codecov Report

Merging #521 (988bdf8) into main (a6df4ac) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #521   +/-   ##
=======================================
  Coverage   97.33%   97.33%           
=======================================
  Files           6        6           
  Lines         225      225           
=======================================
  Hits          219      219           
  Misses          6        6

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 4ba77a1...988bdf8. Read the comment docs.

trieloff commented 3 years ago

:tada: This PR is included in version 1.12.1 :tada:

The release is available on:

v1.12.1
GitHub release

Your semantic-release bot :package::rocket:

adobe / helix-embed

chore(deps): update dependency url-parse to 1.5.2 [security] #521