fix(deps): update dependency cross-fetch to v3.1.5 [security] #78
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
Kudos, SonarCloud Quality Gate passed!
|
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. ⚠ Warning: custom changes will be lost. |
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
40b868e
to
f88cb8f
Compare
|
👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎ This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. |
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
f88cb8f
to
ab3eb51
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
ab3eb51
to
bb127c1
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
bb127c1
to
b24a1bd
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
b24a1bd
to
4ba4051
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
4ba4051
to
a5e8904
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
a5e8904
to
8f1e4f2
Compare
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/cross-fetch@3.1.4, npm/graceful-fs@4.2.6 |
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
8f1e4f2
to
e0ff9f3
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
e0ff9f3
to
981811a
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
981811a
to
e44cfdf
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
e44cfdf
to
7aee11b
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
7aee11b
to
f5ace98
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
f5ace98
to
1d4e2c6
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
78a22a7
to
0b6a8a7
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
0b6a8a7
to
2d21b76
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
2d21b76
to
c046022
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
c046022
to
48bf502
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
48bf502
to
2e8654d
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
2e8654d
to
1b219e3
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
1b219e3
to
4fe2864
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
4fe2864
to
8c80481
Compare
|
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
8c80481
to
65d8b8a
Compare
|
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
65d8b8a
to
aacac54
Compare
|
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
aacac54
to
c8c5f22
Compare
renovate
bot
force-pushed
the
renovate/npm-cross-fetch-vulnerability
branch
from
c8c5f22
to
2697d3e
Compare
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.1.4->3.1.5GitHub Vulnerability Alerts
CVE-2022-1365
When fetching a remote url with Cookie if it get Location response header then it will follow that url and try to fetch that url with provided cookie . So cookie is leaked here to thirdparty.
Ex: you try to fetch example.com with cookie and if it get redirect url to attacker.com then it fetch that redirect url with provided cookie .
Release Notes
lquixada/cross-fetch (cross-fetch)
v3.1.5Compare Source
What's Changed
New Contributors
Full Changelog: lquixada/cross-fetch@v3.1.4...v3.1.5
Configuration
📅 Schedule: Branch creation - "" in timezone Europe/Paris, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.