Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

[dist] Update dependency async to v3.2.2 [SECURITY]#1593

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Open
renovate wants to merge1 commit intomaster
base:master
Choose a base branch
Loading
fromrenovate/npm-async-vulnerability

Conversation

@renovate
Copy link
Contributor

@renovaterenovatebot commentedJun 23, 2022
edited
Loading

This PR contains the following updates:

PackageChangeAgeAdoptionPassingConfidence
async (source)3.1.0 ->3.2.2ageadoptionpassingconfidence

GitHub Vulnerability Alerts

CVE-2021-43138

A vulnerability exists in Async through 3.2.1 for 3.x and through 2.6.3 for 2.x (fixed in 3.2.2 and 2.6.4), which could let a malicious user obtain privileges via themapValues() method.


Release Notes

caolan/async (async)

v3.2.2

Compare Source

  • Fix potential prototype pollution exploit

v3.2.1

Compare Source

v3.2.0

Compare Source

v3.1.1

Compare Source

  • Allow redefiningname property on wrapped functions.

Configuration

📅Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated byMend Renovate. View therepository job log.

@renovaterenovatebot changed the title[dist] Update dependency async to 3.2.2 [SECURITY][dist] Update dependency async to v3.2.2 [SECURITY]Mar 24, 2023
@renovaterenovatebotforce-pushed therenovate/npm-async-vulnerability branch fromb41d57e toa6d5199CompareNovember 11, 2025 01:12
@renovaterenovatebotforce-pushed therenovate/npm-async-vulnerability branch froma6d5199 to3fa0378CompareNovember 18, 2025 22:44
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant


[8]ページ先頭

©2009-2025 Movatter.jp