spotify
spotify copied to clipboard
chore(deps): update dependency tree-kill to 1.2.2 [security] - abandoned
This PR contains the following updates:
Package | Change |
---|---|
tree-kill | 1.2.1 -> 1.2.2 |
GitHub Vulnerability Alerts
GHSA-884p-74jh-xrg2
Versions of tree-kill
prior to 1.2.2 are vulnerable to Command Injection. The package fails to sanitize values passed to the kill
function. If this value is user-controlled it may allow attackers to run arbitrary commands in the server. The issue only affects Windows systems.
Recommendation
Upgrade to version 1.2.2 or later.
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.
🔍 Inspect: https://vercel.com/walterzalazarmdp/spotify/CwbWHS547mLsZCHUcJLCycLWsShh
✅ Preview: https://spotify-git-renovate-npm-tree-kill-vulnerability-164118.vercel.app
Autoclosing Skipped
This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.