rparini / cxroots-app / 6832834567

62%

push

github

Update dependency node to v20 (#93)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [node](https://togithub.com/nodejs/node) | major | `18.18.2` ->
`20.9.0` |

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

###
[`v20.9.0`](https://togithub.com/nodejs/node/compare/v20.8.1...v20.9.0)

[Compare
Source](https://togithub.com/nodejs/node/compare/v20.8.1...v20.9.0)

### [`v20.8.1`](https://togithub.com/nodejs/node/releases/tag/v20.8.1):
2023-10-13, Version 20.8.1 (Current), @&#8203;RafaelGSS

[Compare
Source](https://togithub.com/nodejs/node/compare/v20.8.0...v20.8.1)

This is a security release.

##### Notable Changes

The following CVEs are fixed in this release:

-
[CVE-2023-44487](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487):
`nghttp2` Security Release (High)
-
[CVE-2023-45143](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45143):
`undici` Security Release (High)
-
[CVE-2023-39332](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39332):
Path traversal through path stored in Uint8Array (High)
-
[CVE-2023-39331](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39331):
Permission model improperly protects against path traversal (High)
-
[CVE-2023-38552](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38552):
Integrity checks according to policies can be circumvented (Medium)
-
[CVE-2023-39333](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39333):
Code injection via WebAssembly export names (Low)

More detailed information on each of the vulnerabilities can be found in
[October 2023 Security
Releases](https://nodejs.org/en/blog/vulnerability/october-2023-security-releases/)
blog post.

##### Commits

- \[[`c86883e844`](https://togithub.com/nodejs/node/commit/c86883e844)]
- **deps**: update nghttp2 to 1.57.0 (James M Snell)
[#&#8203;50121](http... (continued)

16 of 23 branches covered (0.0%)

Branch coverage included in aggregate %.

37 of 67 relevant lines covered (55.22%)

0.88 hits per line