chore(deps): update dependency minimist to 1.2.6 [security] - autoclosed

hackariens / vuejs

Templates pour la création d'un nouveau projet vuejs

0 stars 0 forks source link

This PR contains the following updates:

Package	Change
minimist	`1.2.5` -> `1.2.6`

GitHub Vulnerability Alerts

CVE-2021-44906

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.

:warning: We detected 3 security issues in this pull request:

Vulnerable Libraries (3)

Severity | Details ----- | -------- Medium | [boxen@1.3.0](https://github.com/koromerzhin/template-vuejs/blob/9ddfef83163212b49ff51dc5ed7052d5a99775b9/apps/package-lock.json) (t) upgrade to: *>3.2.0* Medium | [lock-verify@2.2.1](https://github.com/koromerzhin/template-vuejs/blob/9ddfef83163212b49ff51dc5ed7052d5a99775b9/apps/package-lock.json) (t) upgrade to: *>1.1.0 || >=2.2.0* Medium | [markdownlint-cli@0.30.0](https://github.com/koromerzhin/template-vuejs/blob/9ddfef83163212b49ff51dc5ed7052d5a99775b9/apps/package-lock.json) (t) upgrade to: *>0.30.0* More info on how to fix Vulnerable Libraries in [JavaScript](https://docs.guardrails.io/docs/en/vulnerabilities/javascript/using_vulnerable_libraries.html?utm_source=ghpr).

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

hackariens / vuejs