{"action":"created","issue":{"url":"https://api.github.com/repos/hinaloe/public-toot-viewer/issues/43","repository_url":"https://api.github.com/repos/hinaloe/public-toot-viewer","labels_url":"https://api.github.com/repos/hinaloe/public-toot-viewer/issues/43/labels{/name}","comments_url":"https://api.github.com/repos/hinaloe/public-toot-viewer/issues/43/comments","events_url":"https://api.github.com/repos/hinaloe/public-toot-viewer/issues/43/events","html_url":"https://github.com/hinaloe/public-toot-viewer/pull/43","id":377565524,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI4NDc4MTA0","number":43,"title":"[Security] Bump stringstream from 0.0.5 to 1.0.0","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":1059920694,"node_id":"MDU6TGFiZWwxMDU5OTIwNjk0","url":"https://api.github.com/repos/hinaloe/public-toot-viewer/labels/dependencies","name":"dependencies","color":"0025ff","default":false},{"id":1059920993,"node_id":"MDU6TGFiZWwxMDU5OTIwOTkz","url":"https://api.github.com/repos/hinaloe/public-toot-viewer/labels/security","name":"security","color":"ee0701","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-11-05T20:18:13Z","updated_at":"2018-11-05T20:19:15Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/hinaloe/public-toot-viewer/pulls/43","html_url":"https://github.com/hinaloe/public-toot-viewer/pull/43","diff_url":"https://github.com/hinaloe/public-toot-viewer/pull/43.diff","patch_url":"https://github.com/hinaloe/public-toot-viewer/pull/43.patch"},"body":"Bumps [stringstream](https://github.com/mhart/StringStream) from 0.0.5 to 1.0.0. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from [The Node Security Working Group](https://github.com/nodejs/security-wg/blob/master/vuln/npm/422.json).*\n\n> **Out-of-bounds Read**\n> `stringstream` allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below\n> \n> Affected versions: <=0.0.5\n\n*Sourced from [The Node Security Working Group](https://github.com/nodejs/security-wg/blob/master/vuln/npm/422.json).*\n\n> **Out-of-bounds Read**\n> `stringstream` allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below\n> \n> Affected versions: <=0.0.5\n\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`8d330f2`](https://github.com/mhart/StringStream/commit/8d330f20101c9fb3a0f979e1cf3993606918d895) 1.0.0\n- [`c8dde4c`](https://github.com/mhart/StringStream/commit/c8dde4cc831ed8efdb8703f405148d947f4aea06) Update to use Transform streams, Node 4+ only, add tests\n- [`fee31c5`](https://github.com/mhart/StringStream/commit/fee31c5c4a5efc7c7cc2fde4aee633dedefd6d67) 0.0.6\n- [`2f4a9d4`](https://github.com/mhart/StringStream/commit/2f4a9d496f94b0880e01a26857aa266a5a3ef274) Merge pull request [#9](https://github-redirect.dependabot.com/mhart/StringStream/issues/9) from mhart/fix-buffer-constructor-vuln\n- [`afbc744`](https://github.com/mhart/StringStream/commit/afbc7442220358419e330618e47f3a65fc265b1b) Ensure data is not a number in Buffer constructor\n- See full diff in [compare view](https://github.com/mhart/StringStream/compare/v0.0.5...v1.0.0)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=stringstream&package-manager=npm_and_yarn&previous-version=0.0.5&new-version=1.0.0)](https://dependabot.com/compatibility-score.html?dependency-name=stringstream&package-manager=npm_and_yarn&previous-version=0.0.5&new-version=1.0.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>"},"comment":{"url":"https://api.github.com/repos/hinaloe/public-toot-viewer/issues/comments/436020674","html_url":"https://github.com/hinaloe/public-toot-viewer/pull/43#issuecomment-436020674","issue_url":"https://api.github.com/repos/hinaloe/public-toot-viewer/issues/43","id":436020674,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNjAyMDY3NA==","user":{"login":"hinaloe","id":5253290,"node_id":"MDQ6VXNlcjUyNTMyOTA=","avatar_url":"https://avatars1.githubusercontent.com/u/5253290?v=4","gravatar_id":"","url":"https://api.github.com/users/hinaloe","html_url":"https://github.com/hinaloe","followers_url":"https://api.github.com/users/hinaloe/followers","following_url":"https://api.github.com/users/hinaloe/following{/other_user}","gists_url":"https://api.github.com/users/hinaloe/gists{/gist_id}","starred_url":"https://api.github.com/users/hinaloe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hinaloe/subscriptions","organizations_url":"https://api.github.com/users/hinaloe/orgs","repos_url":"https://api.github.com/users/hinaloe/repos","events_url":"https://api.github.com/users/hinaloe/events{/privacy}","received_events_url":"https://api.github.com/users/hinaloe/received_events","type":"User","site_admin":false},"created_at":"2018-11-05T20:19:15Z","updated_at":"2018-11-05T20:19:15Z","author_association":"OWNER","body":"Deploy preview for *timber-grader-polecat-68568* ready!\n\nBuilt with commit 0c75b5aac4e8a1ab3a6483860ba8be3b25c64acd\n\nhttps://deploy-preview-43--timber-grader-polecat-68568.netlify.com"}}
{"actor":{"display_login":"hinaloe"}}