Update dependency minimist to 1.2.6 [SECURITY] - autoclosed

renovate[bot] commented 2 years ago

This PR contains the following updates:

Package	Change
minimist	`0.0.8` -> `1.2.6`
minimist	`1.2.0` -> `1.2.6`
minimist	`1.2.5` -> `1.2.6`

GitHub Vulnerability Alerts

CVE-2021-44906

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

[ ] If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.

viezly[bot] commented 2 years ago

Pull request by bot. No need to analyze

vercel[bot] commented 2 years ago

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/bgoonz/search-awesome/8GWLybmQAhjZTcsLgYC22jqnS6S4
✅ Preview: https://search-awesome-git-renovate-npm-minimist-vulnerability-bgoonz.vercel.app

bgoonz / searchAwesome