search

tidharmws / vulnerable-node

https://github.com/cr0hn/vulnerable-node
Other
0 stars 0 forks source link

Update dependency serve-favicon to ~2.4.0 #18

Open mend-for-github-com[bot] opened 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
serve-favicon ~2.3.0 -> ~2.4.0 age adoption passing confidence

By merging this PR, the issue #17 will be automatically resolved and closed:

Severity CVSS Score CVE
Medium Medium 4.3 CVE-2017-20162

Release Notes

expressjs/serve-favicon (serve-favicon) ### [`v2.4.3`](https://togithub.com/expressjs/serve-favicon/blob/HEAD/HISTORY.md#243--2017-05-16) [Compare Source](https://togithub.com/expressjs/serve-favicon/compare/v2.4.2...v2.4.3) \================== - Use `safe-buffer` for improved Buffer API - deps: ms@2.0.0 ### [`v2.4.2`](https://togithub.com/expressjs/serve-favicon/blob/HEAD/HISTORY.md#242--2017-03-24) [Compare Source](https://togithub.com/expressjs/serve-favicon/compare/v2.4.1...v2.4.2) \================== - deps: ms@1.0.0 ### [`v2.4.1`](https://togithub.com/expressjs/serve-favicon/blob/HEAD/HISTORY.md#241--2017-02-27) [Compare Source](https://togithub.com/expressjs/serve-favicon/compare/v2.4.0...v2.4.1) \================== - Remove usage of `res._headers` private field - deps: fresh@0.5.0 - Fix incorrect result when `If-None-Match` has both `*` and ETags - Fix weak `ETag` matching to match spec - perf: skip checking modified time if ETag check failed - perf: skip parsing `If-None-Match` when no `ETag` header - perf: use `Date.parse` instead of `new Date` ### [`v2.4.0`](https://togithub.com/expressjs/serve-favicon/blob/HEAD/HISTORY.md#240--2017-02-19) [Compare Source](https://togithub.com/expressjs/serve-favicon/compare/v2.3.2...v2.4.0) \================== - deps: etag@~1.8.0 - Use SHA1 instead of MD5 for ETag hashing - Works with FIPS 140-2 OpenSSL configuration - deps: fresh@0.4.0 - Fix false detection of `no-cache` request directive - perf: enable strict mode - perf: hoist regular expressions - perf: remove duplicate conditional - perf: remove unnecessary boolean coercions - perf: simplify initial argument checking