search

uriel-naor / ISSUES

0 stars 0 forks source link

Update dependency adm-zip to v0.4.9 - autoclosed #36

Closed uriel-mend-app[bot] closed 1 year ago

uriel-mend-app[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
adm-zip dependencies patch 0.4.7 -> 0.4.9

Mend ensures you have the greatest risk reduction (highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.

Version 0.4.9 | Risk Change | Critical | High | Medium | Low | | --- | --- | --- | --- | --- | | -100% | 0 (--) | 0 (--) | 0 (-1 ) | 0 (--) |
Version 0.4.7 | Risk Change | Critical | High | Medium | Low | | --- | --- | --- | --- | --- | | N/A | 0 | 0 | 1 | 0 |
Version 0.5.9 | Risk Change | Critical | High | Medium | Low | | --- | --- | --- | --- | --- | | -100% | 0 (--) | 0 (--) | 0 (-1 ) | 0 (--) |

By merging this PR, the number of vulnerabilities in issue #30 will be resolved in part or in full.

--- ### Release Notes

cthackers/adm-zip ### [`v0.4.9`](https://togithub.com/cthackers/adm-zip/blob/HEAD/history.md#​049--2018-04-25) [Compare Source](https://togithub.com/cthackers/adm-zip/compare/v0.4.8...v0.4.9) \================== - Update package.json (The Brain) - Update README.md (The Brain) - fix: resolve both target and entry path (Danny Grander) ### [`v0.4.8`](https://togithub.com/cthackers/adm-zip/blob/HEAD/history.md#​048--2018-04-23) [Compare Source](https://togithub.com/cthackers/adm-zip/compare/v0.4.7...v0.4.8) \================== - Update package.json (The Brain) - Update package.json (The Brain) - Update package.json (The Brain) - fix: prevent extracting archived files outside of target path (Aviad Reich) - add try-catch around fs.writeSync (olya) - Fix data accessing example in README (Philipp Muens) - Remove buffers `noAssert` argument (Ruben Bridgewater) - Fix license expression to be compatible to SPDX. (Golo Roden) - Added travis ci support (Amila Welihinda) - add bug fix on special character in filename that are allowed in linux but not in windows (Ygal Bellaiche) - Change project name for publishing to npm (David Kadlecek) - Added support for electron original-fs (David Kadlecek) - fixed [#​130](https://togithub.com/cthackers/adm-zip/issues/130): ensure buffer (lloiser) - fix Issue: [https://github.com/cthackers/adm-zip/issues/102](https://togithub.com/cthackers/adm-zip/issues/102) (mygoare) - Update license attribute (Peter deHaan) - lowcase for the function name (Changyu Geng) - Add a test function (Changyu Geng) - Under windows, the path should be normalize first, otherwise the localPath will still use back slash (Shauk Wu) - Update adm-zip.js (MikeNerevarin) - Fix adm-zip.addFile default attributes for files and directories (Pavel Strashkin) - Fixed CRC bug (The Brain)
--- - [ ] If you want to rebase/retry this PR, click this checkbox.