Skip to content

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade vm2 from 3.9.2 to 3.9.3.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2021-04-05.
Release notes
Package name: vm2 from vm2 GitHub release notes
Commit messages
Package name: vm2
  • d470fd9 Release 3.9.3
  • ff894fc Fix dynamic import attack
  • a81e12c Merge pull request #305 from patriksimek/dependabot/npm_and_yarn/lodash-4.17.19
  • d12bdbd Merge pull request #300 from XmiliaH/fix-297
  • 77a7681 Merge pull request #301 from XmiliaH/fix-295
  • 2c047f0 Merge branch 'master' into fix-295
  • 8a76a08 Merge pull request #302 from XmiliaH/fix-289
  • 3f05f98 Merge pull request #309 from Shigma/patch-2
  • 56c3e6f Merge pull request #308 from Shigma/patch-1
  • 597f083 fix anothor bug in contextify.js
  • e814aad Fix a bug in contextify.js
  • df94e27 Bump lodash from 4.17.15 to 4.17.19
  • 548544f Support shebang in NodeVM
  • 43665f1 Make lint happy the second
  • ad52457 Make lint happy
  • 219b7ca Fix Promise delete from global
  • 3daa305 Fix 295 writeable can change on non configurable
  • c0e0a92 Update readme to reflect path resolve changes
  • 5b92f75 And one more
  • 3795103 Fixed some spelling

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant