[Security] Bump stringstream from 0.0.5 to 0.0.6
Bumps stringstream from 0.0.5 to 0.0.6. This update includes security fixes.
Vulnerabilities fixed
Sourced from The Node Security Working Group.
Out-of-bounds Read
stringstreamallocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and belowAffected versions: <=0.0.5
Sourced from The Node Security Working Group.
Out-of-bounds Read
stringstreamallocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and belowAffected versions: <=0.0.5
Commits
fee31c50.0.62f4a9d4Merge pull request #9 from mhart/fix-buffer-constructor-vulnafbc744Ensure data is not a number in Buffer constructor- See full diff in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge@dependabot reopenwill reopen this PR if it is closed@dependabot ignore this [patch|minor|major] versionwill close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language@dependabot badge mewill comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot dashboard:
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
| Warnings | |
|---|---|
| :warning: |
Please include a Pivotal story at the beginning of the PR title (see below). |
Example of PR titles that include pivotal stories:
- single story:
[#123456] my PR title - multiple stories:
[#123456,#123457,#123458] my PR title
Generated by :no_entry_sign: dangerJS