Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

chore(deps): update dependency systeminformation to v5.21.7 [security] #1791

Merged
merged 1 commit into from
Sep 22, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 22, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
systeminformation (source) 5.21.5 -> 5.21.7 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2023-42810

Impact

SSID Command Injection Vulnerability

Patches

Problem was fixed with a parameter check. Please upgrade to version >= 5.21.7, Version 4 was not affected

Workarounds

If you cannot upgrade, be sure to check or sanitize parameter strings that are passed to wifiConnections(), wifiNetworks() (string only)

References

See also https://systeminformation.io/security.html


Release Notes

sebhildebrandt/systeminformation (systeminformation)

v5.21.7

Compare Source

v5.21.6

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot merged commit df2b24f into main Sep 22, 2023
@renovate renovate bot deleted the renovate/npm-systeminformation-vulnerability branch September 22, 2023 22:46
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants