Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build: updated ini to 1.3.8 to resolve CVE-2020-7788 #2442

Closed
wants to merge 1 commit into from
Closed

build: updated ini to 1.3.8 to resolve CVE-2020-7788 #2442

wants to merge 1 commit into from

Conversation

cmdcarini
Copy link

This change includes a patch update for the ini package that resolves security vulnerability CVE-2020-7788.

References

CVE-2020-7788

@cmdcarini cmdcarini requested a review from a team as a code owner January 5, 2021 14:43
@darcyclarke darcyclarke added the Release 6.x work is associated with a specific npm 6 release label Jan 5, 2021
@darcyclarke darcyclarke self-assigned this Jan 5, 2021
@darcyclarke darcyclarke added release: next These items should be addressed in the next release semver:patch semver patch level for changes labels Jan 6, 2021
darcyclarke added a commit that referenced this pull request Jan 8, 2021
@darcyclarke @cmdcarini
ini@1.3.8
19108ca 
Closes: #2442
Co-authored-by: Marco Carini <cmdcarini@gmail.com>
@darcyclarke
Copy link
Contributor

This should have been automatically closed by #2457 hmm 🤔 Either way, thanks for the flag here. The commit that landed should have you as a co-author & this should be available now in npm@6.14.11 (npm i -g npm@latest)

@darcyclarke darcyclarke closed this Jan 8, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@darcyclarke darcyclarke

Labels
release: next These items should be addressed in the next release Release 6.x work is associated with a specific npm 6 release semver:patch semver patch level for changes
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@cmdcarini @darcyclarke