Closed renovate[bot] closed 2 years ago
Merging #772 (1401963) into next (84d7444) will not change coverage. The diff coverage is
n/a
.
@@ Coverage Diff @@
## next #772 +/- ##
=======================================
Coverage 70.84% 70.84%
=======================================
Files 9 9
Lines 1595 1595
Branches 304 304
=======================================
Hits 1130 1130
Misses 465 465
Continue to review full report at Codecov.
Legend - Click here to learn more
Ξ = absolute <relative> (impact)
,ΓΈ = not affected
,? = missing data
Powered by Codecov. Last update 84d7444...1401963. Read the comment docs.
This PR contains the following updates:
2.29.1
->2.29.2
GitHub Vulnerability Alerts
CVE-2022-24785
Impact
This vulnerability impacts npm (server) users of moment.js, especially if user provided locale string, eg
fr
is directly used to switch moment locale.Patches
This problem is patched in 2.29.2, and the patch can be applied to all affected versions (from 1.0.1 up until 2.29.1, inclusive).
Workarounds
Sanitize user-provided locale name before passing it to moment.js.
References
Are there any links users can visit to find out more?
For more information
If you have any questions or comments about this advisory:
Configuration
π Schedule: "" in timezone Europe/Berlin.
π¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
β» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
π Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.