chore(deps): update dependency react-dev-utils to 11.0.4 [security] - abandoned

renovate[bot] commented 2 years ago

This PR contains the following updates:

Package	Change
react-dev-utils	`4.2.3` -> `11.0.4`

GitHub Vulnerability Alerts

CVE-2021-24033

react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. Only when this function is manually invoked with user-provided values (ie: by custom code) is there the potential for command injection. If you're consuming it from react-scripts then this issue does not affect you.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

netlify[bot] commented 2 years ago

❌ Deploy preview failed at Netlify. @jimmyandrade take a look please

🔨 Explore the source changes: 7e5d9f01354bfacbccd064f17908a0b61274f0f9

🔍 Inspect the deploy log: https://app.netlify.com/sites/multei/deploys/6225fbc990c2ec0008672ddb

renovate[bot] commented 1 year ago

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

multei / web