Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Chore: fixes some npm audit vulnerabilities - autoclosed #9

Closed
wants to merge 1 commit into from

Conversation

lalaps[bot]
Copy link

@lalaps lalaps bot commented Jul 10, 2022

This PR fixes some of found vulnerabilities.

Fixed 2 of 5 npm vulnerabilities.
3 issues left.
Success Rate: 40.0%

Vulnerabilities:

Authorization Bypass in parse-path
Library: parse-path
Affected versions: <5.0.0
Severity: high
Fix: ✔️ 1.0.5
Root Libraries:

  • ✔️ semantic-release-telegram >=1.1.0. Fixed in 1.0.5

You can wait for the next updates with a full fix or merge immediately.
In case of closing this PR, it will be recreated. If that's undesired, modify config.


This change is Reviewable

No fix can further be provided.

@lalaps lalaps bot requested a review from pustovitDmytro as a code owner July 10, 2022 00:06
@lalaps lalaps bot added the dependencies label Jul 10, 2022
@lalaps lalaps bot added the security label Jul 10, 2022
@lalaps lalaps bot mentioned this pull request Jul 10, 2022
@pustovitDmytro
Copy link
Owner

Fails
🚫

Danger failed to run .dangerfile.js.

Error Error

Cannot find module '@commitlint/lint'
Require stack:
- .dangerfile.js
- /home/circleci/project/node_modules/danger/distribution/runner/runners/inline.js
- /home/circleci/project/node_modules/danger/distribution/commands/danger-runner.js
Error: Cannot find module '@commitlint/lint'
Require stack:
- .dangerfile.js
- /home/circleci/project/node_modules/danger/distribution/runner/runners/inline.js
- /home/circleci/project/node_modules/danger/distribution/commands/danger-runner.js
    at Function.Module._resolveFilename (internal/modules/cjs/loader.js:902:15)
    at Function.Module._load (internal/modules/cjs/loader.js:746:27)
    at Function._module2.default._load (/home/circleci/project/node_modules/override-require/dist/overrideRequire.js:43:25)
    at Module.require (internal/modules/cjs/loader.js:974:19)
    at require (internal/modules/cjs/helpers.js:93:18)
    at Object.<anonymous> (.dangerfile.js:8:36)
    at Module._compile (internal/modules/cjs/loader.js:1085:14)
    at requireFromString (/home/circleci/project/node_modules/require-from-string/index.js:28:4)
    at /home/circleci/project/node_modules/danger/distribution/runner/runners/inline.js:157:68
    at step (/home/circleci/project/node_modules/danger/distribution/runner/runners/inline.js:52:23)

Dangerfile

------------------^

Generated by 🚫 dangerJS against 3adbcc8

@lalaps lalaps bot changed the title Chore: fixes some npm audit vulnerabilities Chore: fixes some npm audit vulnerabilities - autoclosed Jul 19, 2022
@lalaps lalaps bot closed this Jul 19, 2022
@lalaps lalaps bot deleted the lalaps/npm-force-partial-fix branch July 19, 2022 00:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant