book icon indicating copy to clipboard operation
book copied to clipboard

📖 The text of the book

Results 53 book issues
Sort by recently updated
recently updated
newest added

Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.4.0 to 1.4.2. Release notes Sourced from loader-utils's releases. v1.4.2 1.4.2 (2022-11-11) Bug Fixes ReDoS problem (#226) (17cbf8f) v1.4.1 1.4.1 (2022-11-07) Bug Fixes security problem (#220) (4504e34)...

dependencies

Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 4.0.4 to 4.0.5. Release notes Sourced from socket.io-parser's releases. 4.0.5 Bug Fixes check the format of the index of each attachment (b559f05) Links Diff: https://github.com/socketio/socket.io-parser/compare/4.0.4...4.0.5 Changelog Sourced...

dependencies

Bumps [file-type](https://github.com/sindresorhus/file-type) from 16.3.0 to 16.5.4. Release notes Sourced from file-type's releases. v16.5.4 Fix: Malformed MKV could cause an infinite loop https://github.com/sindresorhus/file-type/commit/d86835680f4cccbee1a60628783c36700ec9e254 CVE-2022-36313 Also fixed in 17.1.3 v16.5.3 Upgrade dependencies...

dependencies

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

dependencies

Bumps [mermaid](https://github.com/knsv/mermaid) from 8.9.3 to 8.14.0. Release notes Sourced from mermaid's releases. 8.14.0 Release Notes Main feature Adding new more secure security level 'sandbox' where all rendering happens in a...

dependencies

Bumps [devcert](https://github.com/davewasmer/devcert) from 1.1.3 to 1.2.1. Commits 1ed164f 1.2.1 b076321 switch from vulnerable VALID_DOMAIN regex to is-valid-domain lib (#79) fecd645 1.2.0 92a14f8 chore: bring lockfiles current be273aa Feature: Allow multiple...

dependencies

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependencies

Bumps [trim-newlines](https://github.com/sindresorhus/trim-newlines) from 3.0.0 to 3.0.1. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trim-newlines&package-manager=npm_and_yarn&previous-version=3.0.0&new-version=3.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.1 to 1.5.10. Commits 8cd4c6c 1.5.10 ce7a01f [fix] Improve handling of empty port 0071490 [doc] Update JSDoc comment a7044e3 [minor] Use more descriptive variable name d547792 [security]...

dependencies