Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency plist to v3.0.6 (master) #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Feb 22, 2024

This PR contains the following updates:

Package Type Update Change
plist dependencies patch 3.0.1 -> 3.0.6

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE Reachability
Critical Critical 9.8 CVE-2022-22912
Medium Medium 4.3 CVE-2021-21366

Release Notes

TooTallNate/node-plist (plist)

v3.0.6

Compare Source

v3.0.5

Compare Source

==================

  • [96e2303d05] Prototype Pollution using .parse() #​114 (mario-canva)
  • update browserify from 16 to 17

v3.0.4

Compare Source

==================

v3.0.3

Compare Source

==================

  • update xmldom to 0.6.0 to patch critical vulnerability (Mike Reinstein)
  • remove flaky saucelabs teseting badge (Mike Reinstein)

v3.0.2

Compare Source

==================

  • update xmldom to 0.5.0 to patch critical vulnerability (Mike Reinstein)
  • update saucelab credentials to point at mreinstein's saucelabs account (Mike Reinstein)
  • remove a bunch of test versions from the matrix because they weren't working in zuul + sauce (Mike Reinstein)

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Feb 22, 2024
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/master-plist-3.x-lockfile branch from 4da4f0e to 20a474c Compare February 24, 2024 02:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants