tideflow

tideflow copied to clipboard

Bumps [file-type](https://github.com/sindresorhus/file-type) from 13.1.2 to 16.5.4. Release notes Sourced from file-type's releases. v16.5.4 Fix: Malformed MKV could cause an infinite loop https://github.com/sindresorhus/file-type/commit/d86835680f4cccbee1a60628783c36700ec9e254 CVE-2022-36313 Also fixed in 17.1.3 v16.5.3 Upgrade dependencies...

dependabot[bot]

Bumps [moment](https://github.com/moment/moment) from 2.26.0 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 3.3.0 to 3.3.2. Release notes Sourced from socket.io-parser's releases. 3.3.2 Bug Fixes prevent DoS (OOM) via massive packets (#95) (89197a0) Links Diff: https://github.com/Automattic/socket.io-parser/compare/3.3.1...3.3.2 3.3.1 Links Diff: https://github.com/socketio/socket.io-parser/compare/3.3.0...3.3.1...

dependabot[bot]

Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 5.1.1 to 6.6.1. Changelog Sourced from nodemailer's changelog. 6.6.1 2021-05-23 Fixed address formatting issue where newlines in an email address, if provided via address object, were not...

dependabot[bot]

Bumps [pathval](https://github.com/chaijs/pathval) from 1.1.0 to 1.1.1. Release notes Sourced from pathval's releases. v1.1.1 Fixes a security issue around prototype pollution. Commits db6c3e3 chore: v1.1.1 7859e0e Merge pull request #60 from...

dependabot[bot]

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.0 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependabot[bot]

Bumps [tar](https://github.com/npm/node-tar) from 4.4.13 to 4.4.19. Commits 9a6faa0 4.4.19 70ef812 drop dirCache for symlink on all platforms 3e35515 4.4.18 52b09e3 fix: prevent path escape using drive-relative paths bb93ba2 fix: reserve...

dependabot[bot]

Bumps [bl](https://github.com/rvagg/bl) from 1.2.2 to 1.2.3. Commits d69edfd 1.2.3 847473a test all branches 0bd87ec Fix unintialized memory access dc097f3 test newer versions of Node See full diff in compare view...

dependabot[bot]

Bumps [simpl-schema](https://github.com/aldeed/simpl-schema/tree/HEAD/package) from 1.7.3 to 1.10.2. Release notes Sourced from simpl-schema's releases. 1.10.2 1.10.2 (2020-10-06) Bug Fixes protect obj merge (5012884) 1.10.1 1.10.1 (2020-09-08) Bug Fixes allow extending only array,...

dependabot[bot]

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.7.6 to 4.7.7. Changelog Sourced from handlebars's changelog. v4.7.7 - February 15th, 2021 fix weird error in integration tests - eb860c0 fix: check prototype property access in...

dependabot[bot]