Skip to content

chore(deps): update dependency async to 3.2.2 [security] - abandoned - #333

Open
renovate[bot] wants to merge 1 commit into
developfrom
renovate/npm-async-vulnerability
Open

chore(deps): update dependency async to 3.2.2 [security] - abandoned#333
renovate[bot] wants to merge 1 commit into
developfrom
renovate/npm-async-vulnerability

Conversation

@renovate

@renovaterenovateBot commented May 16, 2022

Copy link
Copy Markdown

Mend Renovate

This PR contains the following updates:

PackageChange
async3.1.0 -> 3.2.2

GitHub Vulnerability Alerts

CVE-2021-43138

A vulnerability exists in Async through 3.2.1 for 3.x and through 2.6.3 for 2.x (fixed in 3.2.2 and 2.6.4), which could let a malicious user obtain privileges via the mapValues() method.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate

renovateBot commented Mar 24, 2023

Copy link
Copy Markdown
Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️Warning: custom changes will be lost.

@renovaterenovateBot changed the title chore(deps): update dependency async to 3.2.2 [security]chore(deps): update dependency async to 3.2.2 [security] - abandonedMar 27, 2026
@renovate

renovateBot commented Mar 27, 2026

Copy link
Copy Markdown
Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@renovate-bot