-
Notifications
You must be signed in to change notification settings - Fork 0
Description
Version 16.4.2 of the react packages was just published.
| Branch | Build failing 🚨 |
|---|---|
| Monorepo release group | react |
| Current Version | 16.4.1 |
| Type | dependency |
This version is covered by your current version range and after updating it in your project the build failed.
This monorepo update includes releases of one or more dependencies which all belong to the react group definition.
react is a direct dependency of this project, and it is very likely causing it to break. If other packages depend on yours, this update is probably also breaking those in turn.
Status Details
- ❌ continuous-integration/travis-ci/push: The Travis CI build failed (Details).
Release Notes
v16.4.216.4.2 (August 1, 2018)
React DOM Server
-
Fix a potential XSS vulnerability when the attacker controls an attribute name (
CVE-2018-6341). This fix is available in the latestreact-dom@16.4.2, as well as in previous affected minor versions:react-dom@16.0.1,react-dom@16.1.2,react-dom@16.2.1, andreact-dom@16.3.3. (@gaearon in #13302) -
Fix a crash in the server renderer when an attribute is called
hasOwnProperty. This fix is only available inreact-dom@16.4.2. (@gaearon in #13303)
FAQ and help
There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.
Your Greenkeeper Bot 🌴