r-hannuschka / ngx-fileupload

angular x fileupload
MIT License
18 stars 7 forks source link

chore(deps): update dependency qs [security] - autoclosed #769

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Change
qs 6.5.2 -> 6.5.3
qs 6.9.6 -> 6.9.7

GitHub Vulnerability Alerts

CVE-2022-24999

qs before 6.10.3 allows attackers to cause a Node process hang because an __ proto__ key can be used. In many typical web framework use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4.


Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.

codecov[bot] commented 1 year ago

Codecov Report

Merging #769 (37f8721) into development (9510f42) will not change coverage. The diff coverage is n/a.

@@             Coverage Diff              @@
##           development     #769   +/-   ##
============================================
  Coverage        98.95%   98.95%           
============================================
  Files               12       12           
  Lines              287      287           
  Branches            53       53           
============================================
  Hits               284      284           
  Partials             3        3           
Flag Coverage Δ
core 98.95% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more