Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency ejs to v3 (master) #11

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Feb 22, 2024

This PR contains the following updates:

Package Type Update Change
ejs dependencies major ^2.5.5 -> ^3.1.10

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE Reachability
Critical Critical 9.8 CVE-2022-29078

Unreachable

Critical Critical 9.8 WS-2021-0153

Unreachable

High High 8.8 CVE-2024-33883

Unreachable


Release Notes

mde/ejs (ejs)

v3.1.10

Compare Source

Version 3.1.10

v3.1.9

Compare Source

Version 3.1.9

v3.1.8

Compare Source

Version 3.1.8

v3.1.7

Compare Source

Version 3.1.7

v3.1.6

Compare Source

Version 3.1.6

v3.1.5

Version 3.1.5

v3.1.3

Compare Source

v3.1.2

Compare Source

v3.0.2

Compare Source

v3.0.1

Compare Source

v2.7.4

Compare Source

Bug fixes

v2.7.3

Compare Source

Bug fixes

v2.7.2

Compare Source

Features
Bug Fixes

v2.7.1

Compare Source

Deprecated:
  • Added deprecation notice for use of require.extensions (@​mde)

v2.6.2

Compare Source

v2.6.1

Compare Source

v2.5.9

Compare Source

v2.5.8

Compare Source

  • Add filename to error when include file cannot be found (@​Leon)
  • Node v9 in CI (@​Thomas)
  • Fixed special case for Express caching (@​mde)
  • Added Promise/async-await support to renderFile (@​mde)
  • Added notes on IDE support to README (@​Betanu701)

v2.5.7

Compare Source

  • Pass configured escape function to rethrow (@​straker)
  • Added vulnerabilities info into README (@​mde)

v2.5.6

Compare Source

  • Use configured escape function for filenames in errors (@​mde)
  • Make file-loader configurable to allow template pre-processing (@​hacke2)
  • Improved renderFile performance (@​nwoltman)

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Feb 22, 2024
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/master-ejs-3.x branch from a8e9e0e to af6fab9 Compare May 19, 2024 20:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants