tanem / default-avatar-helper Goto Github PK

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Datasource	Name	Replacement PR?
npm	parcel-bundler

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• Lock file maintenance

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• Update dependency rollup to v4.19.0
• Update typescript-eslint monorepo to v7.17.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency eslint to v9

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

大佬，看你这个项目调用了shell-quote等503个开源组件，存在3个安全漏洞，建议你升级下。

漏洞标题：shell-quote 安全漏洞
漏洞编号：CVE-2021-42740
漏洞描述：
shell-quote是开源的一个软件包。用于解析和引用 shell 命令。
shell-quote package存在安全漏洞，攻击者可利用该漏洞可以植入任意代码从而执行相关操作。
影响范围：(∞, 1.7.3)
最小修复版本：1.7.3
引入路径：
[email protected]>[email protected]>[email protected]

另外2个漏洞 ，信息有点多我就不贴了，你自己看下完整报告：https://www.mfsec.cn/jr?p=adbc87
你对这个issues有任何疑问可以回复我，我能看见哈。

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: undefined. Note: this is a nested preset so please contact the preset author if you are unable to fix it yourself.