Skip to content

VULN UPGRADE: minor: mocha, request [node_modules/tr46]#29

Closed
campaigner-prod[bot] wants to merge 1 commit intomasterfrom
engraver-auto-version-upgrade/minorpatch/npm/tr46/4-1770968256
Closed

VULN UPGRADE: minor: mocha, request [node_modules/tr46]#29
campaigner-prod[bot] wants to merge 1 commit intomasterfrom
engraver-auto-version-upgrade/minorpatch/npm/tr46/4-1770968256

Conversation

@campaigner-prod
Copy link
Copy Markdown

Summary: Security update — 2 packages upgraded (MINOR changes included)

Manifests changed:

  • node_modules/tr46 (npm)

Updates

Package From To Type Vulnerabilities Fixed
request 2.57.0 2.88.2 minor 4 MODERATE
mocha 2.2.5 2.5.3 minor -

Packages marked with "-" are updated due to dependency constraints.


Security Details

ℹ️ Other Vulnerabilities (4)
Package CVE Severity Summary Unsafe Version Fixed In
request GHSA-7xfp-9c55-5vqj MODERATE Remote Memory Exposure in request 2.57.0 2.68.0
request CVE-2017-16026 MODERATE - 2.57.0 -
request GHSA-p8p7-x288-28g6 MODERATE Server-Side Request Forgery in Request 2.57.0 -
request CVE-2023-28155 MODERATE - 2.57.0 -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System

@campaigner-prod campaigner-prod bot requested a review from a team as a code owner February 13, 2026 07:38
@campaigner-prod campaigner-prod bot closed this Mar 1, 2026
@campaigner-prod campaigner-prod bot deleted the engraver-auto-version-upgrade/minorpatch/npm/tr46/4-1770968256 branch March 1, 2026 14:25
@DataDog DataDog deleted a comment from dd-prapprover bot Mar 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants