Flight Log / novuhq/novu #8438
fix(root): update nx packages and override path-to-regexp to fix CVE-2024-45296 — a Devin (Cognition) bot flight
The Devin bot (Cognition) opened this pull request in novuhq/novu on Jun 3, 2025; merged clean in 9.4 h, merged by @scopsy: +195 −530, 2 files, 1 review.
Flown by
- Lines
- +195 −530
- Files
- 2
- Commits
- 1
- Reviews
- 1
- To merge
- 9.4 h
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
Devin opened a fix to update the NX packages and override path-to-regexp to address a ReDoS vulnerability in novuhq/novu. The change touched two files, with 195 additions and 530 deletions, in one commit. The PR merged clean after one review with no change requests, taking 9.37 hours to merge.
From the pull request description
# Fix path-to-regexp vulnerability (CVE-2024-45296) ## Summary This PR addresses the security vulnerability in `path-to-regexp` versions < 0.1.12 that are vulnerable to Regular Expression Denial of Service (ReDoS) attacks. ## Changes Made - Updated NX packages from 20.3.0 to 21.1.2: - `@nx/eslin…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedDevin AI
- —reviewed
- Jun 4, 2025mergedscopsy
- Jun 4, 2025closedscopsy
Read next
Cite this flight: AgentRiders Flight Log, novuhq/novu#8438, record updated Nov 4, 2026, https://agentriders.com/logs/novuhq/novu/8438/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.