Skip to content

Update Socket patches: +2 patches - #11

Open
socket-security[bot] wants to merge 1 commit into
masterfrom
socket/autopatch-1787679973349-5ba69fed
Open

Update Socket patches: +2 patches#11
socket-security[bot] wants to merge 1 commit into
masterfrom
socket/autopatch-1787679973349-5ba69fed

Conversation

@socket-security

Copy link
Copy Markdown

Summary

This PR updates Socket security patches for your dependencies.

These patches are applied via the Socket patch agent — .socket/manifest.json + a package.json postinstall hook.

Changes

  • Added: CVE-2020-7793 in pkg:npm/ua-parser-js@0.7.17 (Socket Patch)
    • Severity: HIGH
    • Summary: ua-parser-js Regular Expression Denial of Service vulnerability
  • Added: CVE-2020-7733 in pkg:npm/ua-parser-js@0.7.17 (Socket Patch)
    • Severity: HIGH
    • Summary: Regular Expression Denial of Service in ua-parser-js

Testing

Review the patches and test your application to ensure compatibility.


🔒 Powered by Socket Security

Updates:
- 3 blob(s) added
- 0 blob(s) removed
- Manifest updated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants