Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency qs to 6.5.3 [security] - autoclosed #108

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 23, 2023

Mend Renovate

This PR contains the following updates:

Package Change
qs 6.5.1 -> 6.5.3

GitHub Vulnerability Alerts

CVE-2022-24999

qs before 6.10.3 allows attackers to cause a Node process hang because an __ proto__ key can be used. In many typical web framework use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@codecov
Copy link

codecov bot commented Mar 23, 2023

Codecov Report

Patch and project coverage have no change.

Comparison is base (56e1707) 100.00% compared to head (126f870) 100.00%.

Additional details and impacted files
@@            Coverage Diff            @@
##              main      #108   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines           29        48   +19     
  Branches         0         3    +3     
=========================================
+ Hits            29        48   +19     

see 1 file with indirect coverage changes

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Mar 25, 2023
@renovate renovate bot closed this Mar 25, 2023
@renovate renovate bot deleted the renovate/npm-qs-vulnerability branch March 25, 2023 00:25
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Mar 25, 2023
@renovate renovate bot reopened this Mar 25, 2023
@renovate renovate bot restored the renovate/npm-qs-vulnerability branch March 25, 2023 00:38
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Mar 25, 2023
@renovate renovate bot closed this Mar 25, 2023
@renovate renovate bot deleted the renovate/npm-qs-vulnerability branch March 25, 2023 04:37
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Mar 25, 2023
@renovate renovate bot reopened this Mar 25, 2023
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Mar 25, 2023
@renovate renovate bot closed this Mar 25, 2023
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Mar 25, 2023
@renovate renovate bot reopened this Mar 25, 2023
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Mar 26, 2023
@renovate renovate bot closed this Mar 26, 2023
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Mar 26, 2023
@renovate renovate bot reopened this Mar 26, 2023
@renovate renovate bot restored the renovate/npm-qs-vulnerability branch March 26, 2023 18:23
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Mar 26, 2023
@renovate renovate bot closed this Mar 26, 2023
@renovate renovate bot deleted the renovate/npm-qs-vulnerability branch March 26, 2023 19:47
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Mar 26, 2023
@renovate renovate bot reopened this Mar 26, 2023
@renovate renovate bot restored the renovate/npm-qs-vulnerability branch March 26, 2023 23:17
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Mar 27, 2023
@renovate renovate bot closed this Mar 27, 2023
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Mar 31, 2023
@renovate renovate bot reopened this Mar 31, 2023
@renovate renovate bot restored the renovate/npm-qs-vulnerability branch March 31, 2023 14:04
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Mar 31, 2023
@renovate renovate bot closed this Mar 31, 2023
@renovate renovate bot deleted the renovate/npm-qs-vulnerability branch March 31, 2023 15:19
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Mar 31, 2023
@renovate renovate bot reopened this Mar 31, 2023
@renovate renovate bot restored the renovate/npm-qs-vulnerability branch March 31, 2023 19:59
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Mar 31, 2023
@renovate renovate bot closed this Mar 31, 2023
@renovate renovate bot deleted the renovate/npm-qs-vulnerability branch March 31, 2023 20:49
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Apr 1, 2023
@renovate renovate bot reopened this Apr 1, 2023
@renovate renovate bot restored the renovate/npm-qs-vulnerability branch April 1, 2023 01:10
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Apr 3, 2023
@renovate renovate bot closed this Apr 3, 2023
@renovate renovate bot deleted the renovate/npm-qs-vulnerability branch April 3, 2023 11:01
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Apr 3, 2023
@renovate renovate bot reopened this Apr 3, 2023
@renovate renovate bot restored the renovate/npm-qs-vulnerability branch April 3, 2023 21:55
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed Apr 17, 2023
@renovate renovate bot closed this Apr 17, 2023
@renovate renovate bot deleted the renovate/npm-qs-vulnerability branch April 17, 2023 12:44
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] - autoclosed chore(deps): update dependency qs to 6.5.3 [security] Apr 18, 2023
@renovate renovate bot reopened this Apr 18, 2023
@renovate renovate bot restored the renovate/npm-qs-vulnerability branch April 18, 2023 15:46
@renovate renovate bot changed the title chore(deps): update dependency qs to 6.5.3 [security] chore(deps): update dependency qs to 6.5.3 [security] - autoclosed May 28, 2023
@renovate renovate bot closed this May 28, 2023
@renovate renovate bot deleted the renovate/npm-qs-vulnerability branch May 28, 2023 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants