Update dependency npmconf to v2 [SECURITY] by renovate[bot] · Pull Request #10 · nookala/first_app

renovate · 2025-01-09T16:04:20Z

This PR contains the following updates:

Package	Change	Age	Confidence
npmconf	`0` → `2.1.3`

Out-of-bounds Read in npmconf

GHSA-57cf-349j-352g

More information

Details

Versions of npmconf before 2.1.3 allocate and write to disk uninitialized memory contents when a typed number is passed as input on Node.js 4.x.

Recommendation

Update to version 2.1.3 or later. Consider switching to another config storage mechanism, as npmconf is deprecated and should not be used.

Severity

Medium

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

npm/npmconf (npmconf)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 3 times, most recently from 09c6e05 to 51e7730 Compare January 17, 2025 11:45

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 3 times, most recently from 78acaf3 to 89e6488 Compare January 31, 2025 19:07

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch from 89e6488 to cc5ceb3 Compare February 1, 2025 19:46

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from b9ed697 to 39113f8 Compare February 12, 2025 07:54

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 40b4442 to 057e939 Compare March 8, 2025 03:32

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 3 times, most recently from 8659a60 to cf98a4b Compare March 19, 2025 23:58

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch from cf98a4b to 294931c Compare March 21, 2025 23:49

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 09d097a to 9478a51 Compare April 4, 2025 03:37

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 257ed84 to 0d49d67 Compare April 27, 2025 07:58

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from e83a96c to 3de86a9 Compare May 10, 2025 19:50

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 7c20289 to ba68e13 Compare May 18, 2025 19:27

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 3cecea1 to 873e386 Compare May 25, 2025 11:37

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 3 times, most recently from 67799f0 to 50c1806 Compare June 6, 2025 18:23

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch from 50c1806 to 7189503 Compare June 8, 2025 10:34

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch from 7189503 to d9f41f8 Compare June 21, 2025 12:03

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 8a6810a to 4686bd2 Compare November 20, 2025 08:14

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 2e3c6bb to 6c0d8d1 Compare December 6, 2025 11:05

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 0306e9a to 38d977d Compare January 2, 2026 07:39

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from b356494 to 6f3767e Compare January 11, 2026 04:03

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from fa16ac8 to a5e228d Compare January 21, 2026 11:56

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 430f179 to 860ce54 Compare February 5, 2026 00:03

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 3 times, most recently from 72ecdce to f3abc84 Compare February 17, 2026 07:02

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch from f3abc84 to 3620648 Compare February 20, 2026 12:10

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch from 3620648 to 9ad8502 Compare March 8, 2026 10:58

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch from 9ad8502 to bba1c18 Compare May 3, 2026 11:39

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from f50a0ab to da17fc1 Compare May 16, 2026 08:24

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 30355f3 to 89b6ca5 Compare May 24, 2026 11:10

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from cacab71 to c89e88f Compare June 6, 2026 20:03

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from 036a46a to 5341fa2 Compare June 14, 2026 07:53

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch 2 times, most recently from a66868a to 935798a Compare July 18, 2026 16:08

renovate Bot force-pushed the renovate/npm-npmconf-vulnerability branch from 935798a to 03fe336 Compare July 25, 2026 07:27

Update dependency npmconf to v2 [SECURITY]

dfb7596

Navigation Menu

Update dependency npmconf to v2 [SECURITY] - #10

Update dependency npmconf to v2 [SECURITY]#10
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/npm-npmconf-vulnerability

renovate Bot commented Jan 9, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jan 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Out-of-bounds Read in npmconf

Details

Recommendation

Severity

References

Release Notes

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jan 9, 2025 •

edited

Loading