Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update dependency ejs to v3 #14

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Jun 13, 2022

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
ejs ^2.4.2 -> ^3.1.10 age adoption passing confidence

By merging this PR, the issue #7 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2022-29078
Critical Critical 9.8 WS-2021-0153
High High 8.8 CVE-2024-33883

Release Notes

mde/ejs (ejs)

v3.1.10

Compare Source

Version 3.1.10

v3.1.9

Compare Source

Version 3.1.9

v3.1.8

Compare Source

Version 3.1.8

v3.1.7

Compare Source

Version 3.1.7

v3.1.6

Compare Source

Version 3.1.6

v3.1.5

Version 3.1.5

v3.1.3

Compare Source

v3.1.2

Compare Source

v3.0.2

Compare Source

v3.0.1

Compare Source

v2.7.4

Compare Source

Bug fixes

v2.7.3

Compare Source

Bug fixes

v2.7.2

Compare Source

Features
Bug Fixes

v2.7.1

Compare Source

Deprecated:
  • Added deprecation notice for use of require.extensions (@​mde)

v2.6.2

Compare Source

v2.6.1

Compare Source

v2.5.9

Compare Source

v2.5.8

Compare Source

  • Add filename to error when include file cannot be found (@​Leon)
  • Node v9 in CI (@​Thomas)
  • Fixed special case for Express caching (@​mde)
  • Added Promise/async-await support to renderFile (@​mde)
  • Added notes on IDE support to README (@​Betanu701)

v2.5.7

Compare Source

  • Pass configured escape function to rethrow (@​straker)
  • Added vulnerabilities info into README (@​mde)

v2.5.6

Compare Source

  • Use configured escape function for filenames in errors (@​mde)
  • Make file-loader configurable to allow template pre-processing (@​hacke2)
  • Improved renderFile performance (@​nwoltman)

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jun 13, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency ejs to v3 fix(deps): update dependency ejs to v3 Jan 29, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/ejs-3.x branch from 3bcbcb7 to 6126577 Compare May 17, 2024 02:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants