Skip to content
This repository was archived by the owner on Sep 21, 2025. It is now read-only.

Commit 4033392

Browse files
committed
Automatic github actions updates. Changes found @lightswitch05
1 parent e837729 commit 4033392

3 files changed

Lines changed: 6 additions & 6 deletions

File tree

docs/rules-v1.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"lastUpdatedDate": "2025-03-14T13:30:38.541Z",
2+
"lastUpdatedDate": "2025-03-15T02:23:50.477Z",
33
"name": "Node Version Audit",
44
"website": "https://github.com/lightswitch05/node-version-audit",
55
"license": "https://github.com/lightswitch05/node-version-audit/blob/master/LICENSE",
@@ -5496,7 +5496,7 @@
54965496
"id": "CVE-2024-22020",
54975497
"baseScore": null,
54985498
"publishedDate": "2024-07-09T02:15:00.000Z",
5499-
"lastModifiedDate": "2024-11-22T12:15:00.000Z",
5499+
"lastModifiedDate": "2025-03-14T19:15:00.000Z",
55005500
"description": "A security flaw in Node.js allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers."
55015501
},
55025502
"CVE-2024-22025": {
@@ -5531,7 +5531,7 @@
55315531
"id": "CVE-2024-27983",
55325532
"baseScore": null,
55335533
"publishedDate": "2024-04-09T01:15:00.000Z",
5534-
"lastModifiedDate": "2024-11-21T09:05:00.000Z",
5534+
"lastModifiedDate": "2025-03-14T18:15:00.000Z",
55355535
"description": "An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the server and then a TCP connection is abruptly closed by the client triggering the Http2Session destructor while header frames are still being processed (and stored in memory) causing a race condition."
55365536
},
55375537
"CVE-2024-36137": {

package-lock.json

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "node-version-audit",
3-
"version": "1.20250314.1",
3+
"version": "1.20250315.0",
44
"description": "Audit your Node version for known CVEs and patches ",
55
"main": "index.js",
66
"scripts": {

0 commit comments

Comments
 (0)