New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

upgrade get-func-name for CVE-2023-43646 #66

Merged

keithamus merged 1 commit into chaijs:main from tylertrussell:tylertrussell/upgrade-get-func-name

Oct 4, 2023

Contributor

tylertrussell commented Oct 4, 2023

get-func-name is vulnerable up to (but excluding) 2.0.0 -- change the requirement to ^2.0.1 to shut dependabot up


          upgrade get-func-name for CVE-2023-43646

b21a307

keithamus approved these changes

View reviewed changes

keithamus enabled auto-merge (squash)

October 4, 2023 21:58

keithamus disabled auto-merge

October 4, 2023 21:59

keithamus merged commit 247f948 into chaijs:main

7 of 8 checks passed

lernerb mentioned this pull request

New release for Dependabot Fix? #67

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment