mmkal / handy-redis

A wrapper around node_redis with Promise and TypeScript support.
Apache License 2.0
172 stars 10 forks source link

chore(deps): update dependency redis to v3.1.1 [security] #287

Closed renovate[bot] closed 3 years ago

renovate[bot] commented 3 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
redis 3.0.2 -> 3.1.1 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-29469

Impact

When a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service.

Patches

The problem was fixed in commit 2d11b6d and was released in version 3.1.1.

References

​1569 (GHSL-2021-026)


Release Notes

NodeRedis/node-redis ### [`v3.1.1`](https://togithub.com/NodeRedis/node-redis/releases/v3.1.1) [Compare Source](https://togithub.com/NodeRedis/node-redis/compare/v3.1.0...v3.1.1) ### Enhancements - Upgrade node and dependencies ([#​1578](https://togithub.com/NodeRedis/node-redis/issues/1578)) ### Fixes - Fix a potential exponential regex in monitor mode ([#​1595](https://togithub.com/NodeRedis/node-redis/issues/1595)) ### [`v3.1.0`](https://togithub.com/NodeRedis/node-redis/releases/v3.1.0) [Compare Source](https://togithub.com/NodeRedis/node-redis/compare/v3.0.2...v3.1.0) ##### Enhancements - Upgrade node and dependencies and redis-commands to support Redis 6 ([#​1578](https://togithub.com/NodeRedis/node-redis/issues/1578)) - Add support for Redis 6 `auth pass [user]` ([#​1508](https://togithub.com/NodeRedis/node-redis/issues/1508))

Configuration

πŸ“… Schedule: "" (UTC).

🚦 Automerge: Enabled.

β™» Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.

πŸ”• Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by WhiteSource Renovate. View repository job log here.