Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(package): Increase minimum marked version for ReDos vuln #1255

Merged
merged 1 commit into from Jan 5, 2018

Conversation

joshwiens
Copy link
Member

@joshwiens joshwiens commented Jan 5, 2018

What kind of change does this PR introduce?

Security

Did you add or update the examples/?

Summary

Related CVE: - CVE: https://nvd.nist.gov/vuln/detail/CVE-2017-17461

Does this PR introduce a breaking change?

No
Other information

@codecov
Copy link

codecov bot commented Jan 5, 2018

Codecov Report

Merging #1255 into master will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master    #1255   +/-   ##
=======================================
  Coverage   76.31%   76.31%           
=======================================
  Files           5        5           
  Lines         477      477           
  Branches      154      154           
=======================================
  Hits          364      364           
  Misses        113      113

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update aab49de...a659398. Read the comment docs.

@shellscape shellscape merged commit c9c61f2 into master Jan 5, 2018
@shellscape
Copy link
Contributor

Of note, this dependency was in devDeps. If you've forked this repo for any reason, or have a local, non-fork copy, this should be merged to yours.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants