matthewhudson / current-device

πŸ“± The easiest way to write conditional CSS and/or JavaScript based on device operating system (iOS, Android, Blackberry, Windows, Firefox OS, MeeGo), orientation (Portrait vs. Landscape), and type (Tablet vs. Mobile).
https://matthewhudson.github.io/current-device/
MIT License
3.94k stars 587 forks source link

chore(deps): update dependency dns-packet to 1.3.2 [security] - autoclosed #290

Closed renovate[bot] closed 3 years ago

renovate[bot] commented 3 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change
dns-packet 1.3.1 -> 1.3.2

GitHub Vulnerability Alerts

CVE-2021-23386

This affects the package dns-packet before versions 1.3.2 and 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names.


Configuration

πŸ“… Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

β™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

πŸ”• Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by WhiteSource Renovate. View repository job log here.

codecov[bot] commented 3 years ago

Codecov Report

Merging #290 (e4339f0) into master (6e2e4ec) will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #290   +/-   ##
=======================================
  Coverage   71.71%   71.71%           
=======================================
  Files           1        1           
  Lines         152      152           
=======================================
  Hits          109      109           
  Misses         43       43           

Continue to review full report at Codecov.

Legend - Click here to learn more Ξ” = absolute <relative> (impact), ΓΈ = not affected, ? = missing data Powered by Codecov. Last update 6e2e4ec...e4339f0. Read the comment docs.

coveralls commented 3 years ago

Coverage Status

Coverage remained the same at 63.37% when pulling e4339f09aac0a1a297295b1f8a89ad15d7529e4e on renovate/npm-dns-packet-vulnerability into 6e2e4ec84148f9f35d82b5532ab25a11140376fc on master.