Skip to content

chore(deps): update dependency plist to v3 [security]#194

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-plist-vulnerability
Open

chore(deps): update dependency plist to v3 [security]#194
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-plist-vulnerability

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate bot commented Mar 31, 2026

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
plist ^2.1.0^3.0.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2022-22912

Prototype pollution vulnerability via .parse() in Plist allows attackers to cause a Denial of Service (DoS) and may lead to remote code execution.


Release Notes

TooTallNate/node-plist (plist)

v3.0.5

Compare Source

==================

  • [96e2303d05] Prototype Pollution using .parse() #​114 (mario-canva)
  • update browserify from 16 to 17

v3.0.4

Compare Source

==================

  • inline xmldom@​0.6.0 to eliminate security warning false positive (Mike Reinstein)

v3.0.3

Compare Source

==================

  • update xmldom to 0.6.0 to patch critical vulnerability (Mike Reinstein)
  • remove flaky saucelabs teseting badge (Mike Reinstein)

v3.0.2

Compare Source

==================

  • update xmldom to 0.5.0 to patch critical vulnerability (Mike Reinstein)
  • update saucelab credentials to point at mreinstein's saucelabs account (Mike Reinstein)
  • remove a bunch of test versions from the matrix because they weren't working in zuul + sauce (Mike Reinstein)

v3.0.1

Compare Source

==================

v3.0.0

Compare Source

==================

  • [cb0d8f1bc6] update Makefile, rebuild dist/ (Mike Reinstein)
  • [9dfeffe73f] remove unsupported browser versions from travis (Mike Reinstein)
  • [c962bfe1ea] update module deps, remove support for node < 6 (Mike Reinstein)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants