-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update dependency commons-io:commons-io to v2 [SECURITY] #14
base: master
Are you sure you want to change the base?
Update dependency commons-io:commons-io to v2 [SECURITY] #14
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #14 +/- ##
============================================
+ Coverage 51.72% 51.88% +0.15%
- Complexity 106 107 +1
============================================
Files 23 23
Lines 609 611 +2
Branches 38 39 +1
============================================
+ Hits 315 317 +2
Misses 281 281
Partials 13 13 ☔ View full report in Codecov by Sentry. |
5f384bc
to
8355b0f
Compare
8355b0f
to
a439fe3
Compare
a439fe3
to
ff16819
Compare
ff16819
to
ffa21f1
Compare
ffa21f1
to
8d98ee0
Compare
This PR contains the following updates:
1.3.2
->2.7
GitHub Vulnerability Alerts
CVE-2021-29425
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.