Open renovate[bot] opened 2 years ago
This PR contains the following updates:
~4.4.1
4.4.1
karma prior to version 6.3.14 contains a cross-site scripting vulnerability.
Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter.
Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.
:preserveSemverRanges
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
~4.4.1
->4.4.1
GitHub Vulnerability Alerts
CVE-2022-0437
karma prior to version 6.3.14 contains a cross-site scripting vulnerability.
CVE-2021-23495
Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter.
Add the preset
:preserveSemverRanges
to your config if you don't want to pin your dependencies.Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.