Closed renovate[bot] closed 2 years ago
This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.
🔍 Inspect: https://vercel.com/notrab/headless-dropshipping-starter/55NWfezmJQVNr9ZTDRZfh62NBuPF
✅ Preview: https://headless-dropshipping-starter-git-renovate-npm-ne-c26c08-notrab.vercel.app
This PR contains the following updates:
12.0.7
->12.0.9
GitHub Vulnerability Alerts
CVE-2022-21721
Impact
Vulnerable code could allow a bad actor to trigger a denial of service attack for anyone running a Next.js app at version >= 12.0.0, and using i18n functionality.
Patches
A patch has been released,
next@12.0.9
, that mitigates this issue. We recommend all affected users upgrade as soon as possible.Workarounds
We recommend upgrading whether you can reproduce or not although you can ensure
/${locale}/_next/
is blocked from reaching the Next.js instance until you upgrade.For more information
If you have any questions or comments about this advisory:
Configuration
📅 Schedule: "" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.