-
Notifications
You must be signed in to change notification settings - Fork 3.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): update dependency https-proxy-agent to version .x 🌟 #4242
chore(deps): update dependency https-proxy-agent to version .x 🌟 #4242
Conversation
adf1685
to
9d249bc
Compare
213289e
to
3d7c596
Compare
ee90b94
to
b8eb752
Compare
b8eb752
to
dd9800e
Compare
79bba36
to
8ca539a
Compare
c33a99f
to
393fd95
Compare
d2ceb2c
to
4dd175d
Compare
e51786d
to
4c77e19
Compare
a576c03
to
150cfaa
Compare
150cfaa
to
068c90d
Compare
fc050bc
to
0bfa7c8
Compare
0bfa7c8
to
45ff8ba
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- Requires node v4+, which is ok in server package 👍
new Buffer()
is deprecated and unsafe. Need to useBuffer.from()
, which I don't see in use anywhere.
@flotwig Can you take a look at this? This appears to be consistently failing in a test that is using the |
Looks like with this update |
PR has been edited👷 This PR has received other commits, so Renovate will stop updating it to avoid conflicts or other problems. If you wish to abandon your changes and have Renovate start over you may click the "rebase" checkbox in the PR body/description. |
Released in |
This PR contains the following updates:
1.0.0
->2.2.0
GitHub Vulnerability Alerts
CVE-2018-3736
https-proxy-agent passes unsanitized options to Buffer(arg) resulting in DoS and uninitialized memory leak.
GHSA-qrg3-f6h6-vq8q / WS-2018-0072
Versions of https-proxy-agent before 2.2.0 are vulnerable to a denial of service. This is due to unsanitized options (proxy.auth) being passed to Buffer().
Release Notes
TooTallNate/node-https-proxy-agent
v2.2.0
Compare Source
==================
Buffer.from()
Renovate configuration
📅 Schedule: "" in timezone America/New_York.
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻️ Rebasing: Whenever PR becomes conflicted, or if you modify the PR title to begin with "
rebase!
".🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot. View repository job log here.