{"action":"opened","number":354,"pull_request":{"url":"https://api.github.com/repos/Xenira/Shashki/pulls/354","id":240367594,"node_id":"MDExOlB1bGxSZXF1ZXN0MjQwMzY3NTk0","html_url":"https://github.com/Xenira/Shashki/pull/354","diff_url":"https://github.com/Xenira/Shashki/pull/354.diff","patch_url":"https://github.com/Xenira/Shashki/pull/354.patch","issue_url":"https://api.github.com/repos/Xenira/Shashki/issues/354","number":354,"state":"open","locked":false,"title":"[Security] Bump sshpk from 1.13.1 to 1.16.0 in /backend","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [sshpk](https://github.com/joyent/node-sshpk) from 1.13.1 to 1.16.0. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from [The npm Advisory Database](https://npmjs.com/advisories/606).*\n\n> **Regular Expression Denial of Service**\n> Versions of `sshpk` before 1.13.2 or 1.14.1 are vulnerable to regular expression denial of service when parsing crafted invalid public keys.\n> \n> Affected versions: <1.13.2; >=1.14.0 <1.14.1\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **Moderate severity vulnerability that affects sshpk**\n> The sshpk NPM package is vulnerable to ReDoS when parsing crafted invalid public keys.\n> \n> Affected versions: < 1.13.2\n\n*Sourced from [The Node Security Working Group](https://github.com/nodejs/security-wg/blob/master/vuln/npm/401.json).*\n\n> **Denial of Service**\n> `sshpk` is vulnerable to ReDoS when parsing crafted invalid public keys\n> \n> Affected versions: <=1.13.1\n\n</details>\n<details>\n<summary>Release notes</summary>\n\n*Sourced from [sshpk's releases](https://github.com/joyent/node-sshpk/releases).*\n\n> ## v1.16.0\n>  * Add support for SPKI fingerprints, PuTTY PPK format (public-key only for now), PKCS#8 PBKDF2 encrypted private keys\r\n>  * Fix for [#48](https://github-redirect.dependabot.com/joyent/node-sshpk/issues/48)\n> \n> ## v1.15.2\n>  * New API for accessing x509 extensions in certificates\r\n>  * Fixes for [#52](https://github-redirect.dependabot.com/joyent/node-sshpk/issues/52), [#50](https://github-redirect.dependabot.com/joyent/node-sshpk/issues/50)\n> \n> ## v1.14.1\n>  * Remove all remaining usage of jodid25519 (abandoned dep)\r\n>  * Add support for DNSSEC key format\r\n>  * Add support for Ed25519 keys in PEM format (according to draft-curdle-pkix)\r\n>  * Fixes for X.509 encoding issues (asn.1 NULLs in RSA certs, cert string type mangling)\r\n>  * Performance issues parsing long SSH public keys\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`574ff21`](https://github.com/joyent/node-sshpk/commit/574ff21e77117b478baf4664856bfc4b0aa41a12) joyent/node-sshpk#18 support for PKCS8 encrypted private keys\n- [`f647cf2`](https://github.com/joyent/node-sshpk/commit/f647cf22c3258ef514d2ba098a4a6aad3492f425) joyent/node-sshpk#27 Add support for PuTTY PPK format\n- [`44aec4a`](https://github.com/joyent/node-sshpk/commit/44aec4ad8bcf7324009c92a52e4c81487cbc24b9) joyent/node-sshpk#59 want support for SPKI fingerprint format\n- [`385ff11`](https://github.com/joyent/node-sshpk/commit/385ff11efc4edd201c07f2ceee23746c13122f9c) joyent/node-sshpk#48 wish: add support for x509 certificates in text form\n- [`c7a6c68`](https://github.com/joyent/node-sshpk/commit/c7a6c6833370f69322c47e73e9f4cfdedaf4e8f4) joyent/node-sshpk#58 des-ede3-cbc encrypted keys broken\n- [`2ab4f2a`](https://github.com/joyent/node-sshpk/commit/2ab4f2a018766559252f2c3426a3735f0860ac0d) joyent/node-sshpk#56 md5 fingerprints not quite right\n- [`026ef47`](https://github.com/joyent/node-sshpk/commit/026ef4764a55648dd15f45f7f14ff9da5d1fe2ad) joyent/node-sshpk#53 stop using optional deps to fix webpack\n- [`53e23fe`](https://github.com/joyent/node-sshpk/commit/53e23feff41226826b45293bc4a9fc45f2e44afe) joyent/node-sshpk#50 Support PKCS#5 AES-256-CBC encrypted private keys\n- [`6b68d49`](https://github.com/joyent/node-sshpk/commit/6b68d49abc7876d81cfa2f3947024f4a84c21a94) joyent/node-sshpk#54 want API for accessing x509 extensions\n- [`1088992`](https://github.com/joyent/node-sshpk/commit/10889924a536c3e3a839c00a31727d60f6d55756) joyent/node-sshpk#52 Buffer no longer performs length check for hex strings i...\n- Additional commits viewable in [compare view](https://github.com/joyent/node-sshpk/compare/v1.13.1...v1.16.0)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=sshpk&package-manager=npm_and_yarn&previous-version=1.13.1&new-version=1.16.0)](https://dependabot.com/compatibility-score.html?dependency-name=sshpk&package-manager=npm_and_yarn&previous-version=1.13.1&new-version=1.16.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>","created_at":"2018-12-21T04:12:42Z","updated_at":"2018-12-21T04:12:42Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/Xenira/Shashki/pulls/354/commits","review_comments_url":"https://api.github.com/repos/Xenira/Shashki/pulls/354/comments","review_comment_url":"https://api.github.com/repos/Xenira/Shashki/pulls/comments{/number}","comments_url":"https://api.github.com/repos/Xenira/Shashki/issues/354/comments","statuses_url":"https://api.github.com/repos/Xenira/Shashki/statuses/bdc9eaa90e91b1ee7d6add5fed41b20f05eac1da","head":{"label":"Xenira:dependabot/npm_and_yarn/backend/sshpk-1.16.0","ref":"dependabot/npm_and_yarn/backend/sshpk-1.16.0","sha":"bdc9eaa90e91b1ee7d6add5fed41b20f05eac1da","user":{"login":"Xenira","id":1288524,"node_id":"MDQ6VXNlcjEyODg1MjQ=","avatar_url":"https://avatars3.githubusercontent.com/u/1288524?v=4","gravatar_id":"","url":"https://api.github.com/users/Xenira","html_url":"https://github.com/Xenira","followers_url":"https://api.github.com/users/Xenira/followers","following_url":"https://api.github.com/users/Xenira/following{/other_user}","gists_url":"https://api.github.com/users/Xenira/gists{/gist_id}","starred_url":"https://api.github.com/users/Xenira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Xenira/subscriptions","organizations_url":"https://api.github.com/users/Xenira/orgs","repos_url":"https://api.github.com/users/Xenira/repos","events_url":"https://api.github.com/users/Xenira/events{/privacy}","received_events_url":"https://api.github.com/users/Xenira/received_events","type":"User","site_admin":false},"repo":{"id":107734843,"node_id":"MDEwOlJlcG9zaXRvcnkxMDc3MzQ4NDM=","name":"Shashki","full_name":"Xenira/Shashki","private":false,"owner":{"login":"Xenira","id":1288524,"node_id":"MDQ6VXNlcjEyODg1MjQ=","avatar_url":"https://avatars3.githubusercontent.com/u/1288524?v=4","gravatar_id":"","url":"https://api.github.com/users/Xenira","html_url":"https://github.com/Xenira","followers_url":"https://api.github.com/users/Xenira/followers","following_url":"https://api.github.com/users/Xenira/following{/other_user}","gists_url":"https://api.github.com/users/Xenira/gists{/gist_id}","starred_url":"https://api.github.com/users/Xenira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Xenira/subscriptions","organizations_url":"https://api.github.com/users/Xenira/orgs","repos_url":"https://api.github.com/users/Xenira/repos","events_url":"https://api.github.com/users/Xenira/events{/privacy}","received_events_url":"https://api.github.com/users/Xenira/received_events","type":"User","site_admin":false},"html_url":"https://github.com/Xenira/Shashki","description":"Russian Draughts implementation for a school project","fork":false,"url":"https://api.github.com/repos/Xenira/Shashki","forks_url":"https://api.github.com/repos/Xenira/Shashki/forks","keys_url":"https://api.github.com/repos/Xenira/Shashki/keys{/key_id}","collaborators_url":"https://api.github.com/repos/Xenira/Shashki/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/Xenira/Shashki/teams","hooks_url":"https://api.github.com/repos/Xenira/Shashki/hooks","issue_events_url":"https://api.github.com/repos/Xenira/Shashki/issues/events{/number}","events_url":"https://api.github.com/repos/Xenira/Shashki/events","assignees_url":"https://api.github.com/repos/Xenira/Shashki/assignees{/user}","branches_url":"https://api.github.com/repos/Xenira/Shashki/branches{/branch}","tags_url":"https://api.github.com/repos/Xenira/Shashki/tags","blobs_url":"https://api.github.com/repos/Xenira/Shashki/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/Xenira/Shashki/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/Xenira/Shashki/git/refs{/sha}","trees_url":"https://api.github.com/repos/Xenira/Shashki/git/trees{/sha}","statuses_url":"https://api.github.com/repos/Xenira/Shashki/statuses/{sha}","languages_url":"https://api.github.com/repos/Xenira/Shashki/languages","stargazers_url":"https://api.github.com/repos/Xenira/Shashki/stargazers","contributors_url":"https://api.github.com/repos/Xenira/Shashki/contributors","subscribers_url":"https://api.github.com/repos/Xenira/Shashki/subscribers","subscription_url":"https://api.github.com/repos/Xenira/Shashki/subscription","commits_url":"https://api.github.com/repos/Xenira/Shashki/commits{/sha}","git_commits_url":"https://api.github.com/repos/Xenira/Shashki/git/commits{/sha}","comments_url":"https://api.github.com/repos/Xenira/Shashki/comments{/number}","issue_comment_url":"https://api.github.com/repos/Xenira/Shashki/issues/comments{/number}","contents_url":"https://api.github.com/repos/Xenira/Shashki/contents/{+path}","compare_url":"https://api.github.com/repos/Xenira/Shashki/compare/{base}...{head}","merges_url":"https://api.github.com/repos/Xenira/Shashki/merges","archive_url":"https://api.github.com/repos/Xenira/Shashki/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/Xenira/Shashki/downloads","issues_url":"https://api.github.com/repos/Xenira/Shashki/issues{/number}","pulls_url":"https://api.github.com/repos/Xenira/Shashki/pulls{/number}","milestones_url":"https://api.github.com/repos/Xenira/Shashki/milestones{/number}","notifications_url":"https://api.github.com/repos/Xenira/Shashki/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/Xenira/Shashki/labels{/name}","releases_url":"https://api.github.com/repos/Xenira/Shashki/releases{/id}","deployments_url":"https://api.github.com/repos/Xenira/Shashki/deployments","created_at":"2017-10-20T23:13:10Z","updated_at":"2018-05-17T08:11:39Z","pushed_at":"2018-12-21T04:12:41Z","git_url":"git://github.com/Xenira/Shashki.git","ssh_url":"git@github.com:Xenira/Shashki.git","clone_url":"https://github.com/Xenira/Shashki.git","svn_url":"https://github.com/Xenira/Shashki","homepage":"https://shashki.herokuapp.com","size":2575,"stargazers_count":1,"watchers_count":1,"language":"TypeScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":54,"license":{"key":"mit","name":"MIT License","spdx_id":"MIT","url":"https://api.github.com/licenses/mit","node_id":"MDc6TGljZW5zZTEz"},"forks":0,"open_issues":54,"watchers":1,"default_branch":"master"}},"base":{"label":"Xenira:master","ref":"master","sha":"067edd57fd572cba6e142397cf1fb356d9d7a64b","user":{"login":"Xenira","id":1288524,"node_id":"MDQ6VXNlcjEyODg1MjQ=","avatar_url":"https://avatars3.githubusercontent.com/u/1288524?v=4","gravatar_id":"","url":"https://api.github.com/users/Xenira","html_url":"https://github.com/Xenira","followers_url":"https://api.github.com/users/Xenira/followers","following_url":"https://api.github.com/users/Xenira/following{/other_user}","gists_url":"https://api.github.com/users/Xenira/gists{/gist_id}","starred_url":"https://api.github.com/users/Xenira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Xenira/subscriptions","organizations_url":"https://api.github.com/users/Xenira/orgs","repos_url":"https://api.github.com/users/Xenira/repos","events_url":"https://api.github.com/users/Xenira/events{/privacy}","received_events_url":"https://api.github.com/users/Xenira/received_events","type":"User","site_admin":false},"repo":{"id":107734843,"node_id":"MDEwOlJlcG9zaXRvcnkxMDc3MzQ4NDM=","name":"Shashki","full_name":"Xenira/Shashki","private":false,"owner":{"login":"Xenira","id":1288524,"node_id":"MDQ6VXNlcjEyODg1MjQ=","avatar_url":"https://avatars3.githubusercontent.com/u/1288524?v=4","gravatar_id":"","url":"https://api.github.com/users/Xenira","html_url":"https://github.com/Xenira","followers_url":"https://api.github.com/users/Xenira/followers","following_url":"https://api.github.com/users/Xenira/following{/other_user}","gists_url":"https://api.github.com/users/Xenira/gists{/gist_id}","starred_url":"https://api.github.com/users/Xenira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Xenira/subscriptions","organizations_url":"https://api.github.com/users/Xenira/orgs","repos_url":"https://api.github.com/users/Xenira/repos","events_url":"https://api.github.com/users/Xenira/events{/privacy}","received_events_url":"https://api.github.com/users/Xenira/received_events","type":"User","site_admin":false},"html_url":"https://github.com/Xenira/Shashki","description":"Russian Draughts implementation for a school project","fork":false,"url":"https://api.github.com/repos/Xenira/Shashki","forks_url":"https://api.github.com/repos/Xenira/Shashki/forks","keys_url":"https://api.github.com/repos/Xenira/Shashki/keys{/key_id}","collaborators_url":"https://api.github.com/repos/Xenira/Shashki/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/Xenira/Shashki/teams","hooks_url":"https://api.github.com/repos/Xenira/Shashki/hooks","issue_events_url":"https://api.github.com/repos/Xenira/Shashki/issues/events{/number}","events_url":"https://api.github.com/repos/Xenira/Shashki/events","assignees_url":"https://api.github.com/repos/Xenira/Shashki/assignees{/user}","branches_url":"https://api.github.com/repos/Xenira/Shashki/branches{/branch}","tags_url":"https://api.github.com/repos/Xenira/Shashki/tags","blobs_url":"https://api.github.com/repos/Xenira/Shashki/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/Xenira/Shashki/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/Xenira/Shashki/git/refs{/sha}","trees_url":"https://api.github.com/repos/Xenira/Shashki/git/trees{/sha}","statuses_url":"https://api.github.com/repos/Xenira/Shashki/statuses/{sha}","languages_url":"https://api.github.com/repos/Xenira/Shashki/languages","stargazers_url":"https://api.github.com/repos/Xenira/Shashki/stargazers","contributors_url":"https://api.github.com/repos/Xenira/Shashki/contributors","subscribers_url":"https://api.github.com/repos/Xenira/Shashki/subscribers","subscription_url":"https://api.github.com/repos/Xenira/Shashki/subscription","commits_url":"https://api.github.com/repos/Xenira/Shashki/commits{/sha}","git_commits_url":"https://api.github.com/repos/Xenira/Shashki/git/commits{/sha}","comments_url":"https://api.github.com/repos/Xenira/Shashki/comments{/number}","issue_comment_url":"https://api.github.com/repos/Xenira/Shashki/issues/comments{/number}","contents_url":"https://api.github.com/repos/Xenira/Shashki/contents/{+path}","compare_url":"https://api.github.com/repos/Xenira/Shashki/compare/{base}...{head}","merges_url":"https://api.github.com/repos/Xenira/Shashki/merges","archive_url":"https://api.github.com/repos/Xenira/Shashki/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/Xenira/Shashki/downloads","issues_url":"https://api.github.com/repos/Xenira/Shashki/issues{/number}","pulls_url":"https://api.github.com/repos/Xenira/Shashki/pulls{/number}","milestones_url":"https://api.github.com/repos/Xenira/Shashki/milestones{/number}","notifications_url":"https://api.github.com/repos/Xenira/Shashki/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/Xenira/Shashki/labels{/name}","releases_url":"https://api.github.com/repos/Xenira/Shashki/releases{/id}","deployments_url":"https://api.github.com/repos/Xenira/Shashki/deployments","created_at":"2017-10-20T23:13:10Z","updated_at":"2018-05-17T08:11:39Z","pushed_at":"2018-12-21T04:12:41Z","git_url":"git://github.com/Xenira/Shashki.git","ssh_url":"git@github.com:Xenira/Shashki.git","clone_url":"https://github.com/Xenira/Shashki.git","svn_url":"https://github.com/Xenira/Shashki","homepage":"https://shashki.herokuapp.com","size":2575,"stargazers_count":1,"watchers_count":1,"language":"TypeScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":54,"license":{"key":"mit","name":"MIT License","spdx_id":"MIT","url":"https://api.github.com/licenses/mit","node_id":"MDc6TGljZW5zZTEz"},"forks":0,"open_issues":54,"watchers":1,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/Xenira/Shashki/pulls/354"},"html":{"href":"https://github.com/Xenira/Shashki/pull/354"},"issue":{"href":"https://api.github.com/repos/Xenira/Shashki/issues/354"},"comments":{"href":"https://api.github.com/repos/Xenira/Shashki/issues/354/comments"},"review_comments":{"href":"https://api.github.com/repos/Xenira/Shashki/pulls/354/comments"},"review_comment":{"href":"https://api.github.com/repos/Xenira/Shashki/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/Xenira/Shashki/pulls/354/commits"},"statuses":{"href":"https://api.github.com/repos/Xenira/Shashki/statuses/bdc9eaa90e91b1ee7d6add5fed41b20f05eac1da"}},"author_association":"NONE","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":6,"deletions":6,"changed_files":1}}
{"actor":{"display_login":"dependabot"}}