Skip to content
This repository has been archived by the owner on Feb 21, 2023. It is now read-only.

Update dependency nanoid to 3.1.31 [SECURITY] #99

Merged
merged 1 commit into from
Feb 9, 2022

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 9, 2022

WhiteSource Renovate

This PR contains the following updates:

Package Change
nanoid 3.1.30 -> 3.1.31

GitHub Vulnerability Alerts

CVE-2021-23566

The package nanoid before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.


Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.

@codecov-commenter
Copy link

Codecov Report

Merging #99 (12591f8) into master (1899725) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff            @@
##            master       #99   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines           51        51           
  Branches         6         6           
=========================================
  Hits            51        51           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1899725...12591f8. Read the comment docs.

@renovate renovate bot merged commit 156c6f3 into master Feb 9, 2022
@renovate renovate bot deleted the renovate/npm-nanoid-vulnerability branch February 9, 2022 10:25
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants