Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency chromedriver to v119 [security] #323

Closed

Conversation

garykim-dev-renovate[bot]
Copy link

This PR contains the following updates:

Package Type Update Change
chromedriver devDependencies major ^83.0.0 -> ^119.0.0

GitHub Vulnerability Alerts

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system.

Note:

An attacker must have access to the system running the vulnerable chromedriver library to exploit it. The success of exploitation also depends on the permissions and privileges of the process running chromedriver.


Release Notes

giggio/node-chromedriver

v119.0.1

Compare Source

v119.0.0

Compare Source

v118.0.1

Compare Source

v118.0.0

Compare Source

v117.0.3

Compare Source

v117.0.2

Compare Source

v117.0.1

Compare Source

v117.0.0

Compare Source

v116.0.0

Compare Source

v115.0.1

Compare Source

v115.0.0

Compare Source

v114.0.3

Compare Source

v114.0.2

Compare Source

v114.0.1

Compare Source

v114.0.0

Compare Source

v113.0.0

Compare Source

v112.0.1

Compare Source

v112.0.0

Compare Source

v111.0.0

Compare Source

v110.0.0

Compare Source

v109.0.0

Compare Source

v108.0.0

Compare Source

v107.0.3

Compare Source

v107.0.2

Compare Source

v107.0.1

Compare Source

v107.0.0

Compare Source

v106.0.1

Compare Source

v106.0.0

Compare Source

v105.0.1

Compare Source

v105.0.0

Compare Source

v104.0.0

Compare Source

v103.0.0

Compare Source

v102.0.0

Compare Source

v101.0.0

Compare Source

v100.0.0

Compare Source

v99.0.0

Compare Source

v98.0.1

Compare Source

v98.0.0

Compare Source

v97.0.4

Compare Source

v97.0.3

Compare Source

v97.0.2

Compare Source

v97.0.1

Compare Source

v97.0.0

Compare Source

v96.0.0

Compare Source

v95.0.0

Compare Source

v94.0.0

Compare Source

v93.0.1

Compare Source

v93.0.0

Compare Source

v92.0.2

Compare Source

v92.0.1

Compare Source

v92.0.0

Compare Source

v91.0.1

Compare Source

v91.0.0

Compare Source

v90.0.1

Compare Source

v90.0.0

Compare Source

v89.0.0

Compare Source

v88.0.0

Compare Source

v87.0.7

Compare Source

v87.0.6

Compare Source

v87.0.5

Compare Source

v87.0.4

Compare Source

v87.0.3

Compare Source

v87.0.2

Compare Source

v87.0.1

Compare Source

v87.0.0

Compare Source

v86.0.0

Compare Source

v85.0.1

Compare Source

v85.0.0

Compare Source

v84.0.1

Compare Source

v84.0.0

Compare Source

v83.0.1

Compare Source


Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, click this checkbox.

Suhas Hariharan and others added 30 commits March 17, 2020 23:00
Hypothetical Assignment will show a NaN if
there is no value in the percentage input.

This is a fix for that issue. If there is no
value in the percentage field, it will be treated
as a zero.

Signed-off-by: Gary Kim <[email protected]>
Added function to calculate cumulative GPA(including unfinished semesters)
This commit makes several improvements.
It migrates the options page to Vue, changes the
author field and copyrights to include
The SAS PES Authors,
deduplicates some code,
and adds some missing information/fixes to the README.

Signed-off-by: Gary Kim <[email protected]>
Mozilla's Webextension Polyfill throws an error when
run in the unit test environment. This has been fixed
by mocking the browser environment using browser-env
and having a global `chrome` object.

Signed-off-by: Gary Kim <[email protected]>
Migrate options to Vue and go more community driven
chore(deps): update dependency ava to ^3.5.1
chore(deps): update dependency webpack to ^4.42.0
…oJson method for class

Signed-off-by: Suhas Hariharan <[email protected]>
chore(deps): update dependency vue-loader to ^15.9.1
chore(deps): update dependency eslint-plugin-vue to ^6.2.2
chore(deps): update dependency eslint-plugin-import to ^2.20.1
…-14.x

chore(deps): update dependency eslint-config-standard to ^14.1.1
Signed-off-by: Suhas Hariharan <[email protected]>
Signed-off-by: Suhas Hariharan <[email protected]>
Added function to save grades to local storage and load grades from storage
Suhas Hariharan and others added 25 commits October 12, 2021 14:19
Signed-off-by: Suhas Hariharan <[email protected]>
Signed-off-by: Suhas Hariharan <[email protected]>
Signed-off-by: Suhas Hariharan <[email protected]>
Signed-off-by: Suhas Hariharan <[email protected]>
Re-adds percentages and fix powerschool changes. also fixes category weighting.
Signed-off-by: Suhas Hariharan <[email protected]>
Signed-off-by: Suhas Hariharan <[email protected]>
Signed-off-by: Suhas Hariharan <[email protected]>
Signed-off-by: Suhas Hariharan <[email protected]>
Signed-off-by: Suhas Hariharan <[email protected]>
Fixed issues due to PowerSchool UI update and fixed category weighting bug
Signed-off-by: Suhas Hariharan <[email protected]>
fix: ignore queries for home page
…ve-calculation

Fix percentages not showing and cumulative GPA double including finished semester
Signed-off-by: Suhas Hariharan <[email protected]>
@garykim-dev-renovate garykim-dev-renovate bot added the dependencies Pull requests that update a dependency file label Nov 9, 2023
@garykim-dev-renovate garykim-dev-renovate bot deleted the renovate/npm-chromedriver-vulnerability branch January 9, 2024 06:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants