spotify
spotify copied to clipboard
chore(deps): update dependency ssri to 6.0.2 [security] - abandoned
This PR contains the following updates:
Package | Change |
---|---|
ssri | 6.0.1 -> 6.0.2 |
GitHub Vulnerability Alerts
CVE-2021-27290
npm ssri
5.2.2-6.0.1 and 7.0.0-8.0.0, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.
🔍 Inspect: https://vercel.com/walterzalazarmdp/spotify/2wwhkMNRXohSGC2Sfbs4uDEJ18Mh
✅ Preview: https://spotify-git-renovate-npm-ssri-vulnerability-walterzalazarmdp.vercel.app
Autoclosing Skipped
This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.