chore(deps): update dependency trim-newlines to 3.0.1 [security] - autoclosed

koromerzhin / js-commands

MIT License

0 stars 0 forks source link

This PR contains the following updates:

Package	Change
trim-newlines	`1.0.0` -> `3.0.1`

GitHub Vulnerability Alerts

CVE-2021-33623

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

:warning: We detected 3 security issues in this pull request:

Vulnerable Libraries (3)

Severity | Details ----- | -------- High | [gitmoji-changelog@2.3.0](https://github.com/koromerzhin/js-commands/blob/8363d668fdaaa2d88d286a8d2081d35f898ec26a/package.json#L35) upgrade to: *>=1.1.0* Critical | [pkg:npm/simple-git@1.132.0@1.132.0](https://github.com/koromerzhin/js-commands/blob/8363d668fdaaa2d88d286a8d2081d35f898ec26a/package-lock.json#L6459) (t) - **no patch available** Critical | [pkg:npm/simple-git@1.132.0@1.132.0](https://github.com/koromerzhin/js-commands/blob/8363d668fdaaa2d88d286a8d2081d35f898ec26a/package-lock.json#L12484) (t) - **no patch available** More info on how to fix Vulnerable Libraries in [JavaScript](https://docs.guardrails.io/docs/en/vulnerabilities/javascript/using_vulnerable_libraries.html?utm_source=ghpr#).

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

koromerzhin / js-commands