Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency react-dev-utils to v11 [SECURITY] #28

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Apr 26, 2021

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
react-dev-utils (source) ^10.2.1 -> ^11.0.4 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-24033

react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. Only when this function is manually invoked with user-provided values (ie: by custom code) is there the potential for command injection. If you're consuming it from react-scripts then this issue does not affect you.


Release Notes

facebook/create-react-app (react-dev-utils)

v11.0.3

Compare Source

v11.0.2

Compare Source

v11.0.1

Compare Source

v11.0.0

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Pin dependency react-dev-utils to v10.2.1 [SECURITY] Pin dependency react-dev-utils to 10.2.1 [SECURITY] May 9, 2021
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from a65e8c4 to f6524f2 Compare May 15, 2021 19:52
@renovate renovate bot changed the title Pin dependency react-dev-utils to 10.2.1 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] May 15, 2021
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Pin dependency react-dev-utils to v10.2.1 [SECURITY] Jun 6, 2021
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from f6524f2 to cd229d3 Compare June 6, 2021 21:53
@renovate renovate bot changed the title Pin dependency react-dev-utils to v10.2.1 [SECURITY] Pin dependency react-dev-utils to v [SECURITY] Mar 7, 2022
@renovate renovate bot changed the title Pin dependency react-dev-utils to v [SECURITY] Pin dependency react-dev-utils to v10.2.1 [SECURITY] Sep 25, 2022
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from cd229d3 to 984339a Compare November 20, 2022 09:51
@renovate renovate bot changed the title Pin dependency react-dev-utils to v10.2.1 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Nov 20, 2022
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Mar 27, 2023
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 984339a to 0f21413 Compare March 27, 2023 07:26
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 0f21413 to bcd9b0c Compare May 28, 2023 17:55
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] May 28, 2023
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from bcd9b0c to 1cf4283 Compare June 2, 2023 05:56
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Jun 2, 2023
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 1cf4283 to 4886b88 Compare June 10, 2023 02:17
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Jun 10, 2023
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 4886b88 to ab3fb16 Compare June 11, 2023 08:11
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Jun 11, 2023
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from ab3fb16 to 44c2aff Compare June 14, 2023 23:57
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Jun 14, 2023
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 44c2aff to b779022 Compare June 17, 2023 02:34
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Jun 17, 2023
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from b779022 to e659643 Compare June 18, 2023 17:25
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Jun 18, 2023
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from e659643 to 62b5413 Compare June 19, 2023 02:42
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Jun 19, 2023
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 62b5413 to 4678721 Compare June 22, 2023 17:54
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Jun 22, 2023
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Jun 23, 2023
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Nov 19, 2024
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 66301d5 to b30377a Compare December 2, 2024 20:54
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Dec 2, 2024
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from b30377a to 96fab44 Compare December 4, 2024 23:49
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Dec 4, 2024
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 96fab44 to ec484a0 Compare December 21, 2024 14:38
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Dec 21, 2024
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from ec484a0 to d1dcf71 Compare December 22, 2024 05:40
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Dec 22, 2024
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from d1dcf71 to 8c710c0 Compare December 23, 2024 17:57
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Dec 23, 2024
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Dec 24, 2024
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 8c710c0 to b10f494 Compare December 24, 2024 23:34
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from b10f494 to c2c10f0 Compare January 15, 2025 20:09
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Jan 15, 2025
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from c2c10f0 to 02dd2da Compare January 17, 2025 06:57
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Jan 17, 2025
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 02dd2da to bc584ad Compare January 25, 2025 07:51
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Jan 25, 2025
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from bc584ad to 547610f Compare January 26, 2025 06:41
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Jan 26, 2025
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 547610f to e0b050d Compare January 31, 2025 19:43
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Jan 31, 2025
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from e0b050d to c736b18 Compare February 2, 2025 03:47
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Feb 2, 2025
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from c736b18 to 5ac3230 Compare February 12, 2025 23:59
@renovate renovate bot changed the title Update dependency react-dev-utils to v11 [SECURITY] Update dependency react-dev-utils to v12 [SECURITY] Feb 12, 2025
@renovate renovate bot force-pushed the renovate/npm-react-dev-utils-vulnerability branch from 5ac3230 to 2cb0ede Compare February 15, 2025 08:14
@renovate renovate bot changed the title Update dependency react-dev-utils to v12 [SECURITY] Update dependency react-dev-utils to v11 [SECURITY] Feb 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants