glados

glados copied to clipboard

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

dependabot[bot]

Bumps [moment-timezone](https://github.com/moment/moment-timezone) from 0.5.34 to 0.5.37. Changelog Sourced from moment-timezone's changelog. 0.5.37 2022.08-25 Re-publish npm package, because of extra folder present in 0.5.36, check moment/moment-timezone#999 0.5.36 2022.08-25 IANA TZDB 2022c...

dependabot[bot]

Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1. Commits 3b0994a 2.0.1 32f468f lib: fixed CVE-2023-42282 and added unit test See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any...

dependabot[bot]

Bumps [tar](https://github.com/isaacs/node-tar) from 6.2.0 to 6.2.1. Commits bef7b1e 6.2.1 fe8cd57 prevent extraction in excessively deep subfolders fe7ebfd remove security.md See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will...

dependabot[bot]

Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2 4.19.1 What's Changed Fix...

dependabot[bot]