search

donmccurdy / three-pathfinding

Navigation mesh utilities for three.js, based on PatrolJS.
https://three-pathfinding.donmccurdy.com/
MIT License
1.2k stars 135 forks source link

Update dependency three to v0.137.0 [SECURITY] #131

Closed renovate[bot] closed 2 years ago

renovate[bot] commented 2 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
three (source) 0.136.0 -> 0.137.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2022-0177

Versions of three.js prior to 0.137.0 load untrusted iframes and allow for attackers to inject arbitrary javascript into a users browser.

Release Notes

mrdoob/three.js ### [`v0.137.0`](https://togithub.com/mrdoob/three.js/compare/1a241ef10048770d56e06d6cd6a64c76cc720f95...9b1fc44b2f4b135afd7eda142dcf021579bca3fa) [Compare Source](https://togithub.com/mrdoob/three.js/compare/1a241ef10048770d56e06d6cd6a64c76cc720f95...9b1fc44b2f4b135afd7eda142dcf021579bca3fa)

Configuration

📅 Schedule: "" in timezone America/Los_Angeles.

🚦 Automerge: Enabled.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by WhiteSource Renovate. View repository job log here.