Skip to content

updated ua-parser package to 0.7.19 version - #1677

Closed
MaksPob wants to merge 1 commit into
BrowserSync:masterfrom
MaksPob:update-ua-parser-package-to-0-7-19
Closed

updated ua-parser package to 0.7.19 version#1677
MaksPob wants to merge 1 commit into
BrowserSync:masterfrom
MaksPob:update-ua-parser-package-to-0-7-19

Conversation

@MaksPob

@MaksPob MaksPob commented Apr 5, 2019

Copy link
Copy Markdown

PR Checklist

Please check if your PR fulfills the following requirements:

PR Type

What kind of change does this PR introduce?

  • Bugfix
  • Feature
  • Code style update (formatting, local variables)
  • Refactoring (no functional changes, no api changes)
  • Build related changes
  • CI related changes
  • Documentation content changes
  • Other... Please describe:

What is the current behavior?

There is a vulnerability in ua-parser package, because its version is old.
https://app.snyk.io/vuln/npm:ua-parser-js:20180227

What is the new behavior?

I updated the version of the ua-parser package. Vulnerability should not be.

Does this PR introduce a breaking change?

  • Yes
  • No

I'm not sure.

Reviewers

@shakyShane @shinnn

@MaksPob

MaksPob commented May 15, 2019

Copy link
Copy Markdown
Author

@shakyShane, Why you closed PR?

@ProLoser

Copy link
Copy Markdown
Contributor

@shakyShane please reopen and merge this PR. Your PR that closed this issue did not incorporate the fix and the targeted package version has a known security risk

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants