Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump our dependencies, to fix vulnerability "Prototype Pollution in JSON5 via Parse Method" as found by Dependabot #6

Merged
merged 1 commit into from
Mar 10, 2023
Merged

Bump our dependencies, to fix vulnerability "Prototype Pollution in JSON5 via Parse Method" as found by Dependabot #6

merged 1 commit into from
Mar 10, 2023

Conversation

paulo-ferraz-oliveira
Copy link
Owner

@paulo-ferraz-oliveira paulo-ferraz-oliveira commented Mar 10, 2023 •
edited
Loading

Locally, we also did npm audit fix for

json5  <1.0.2
Severity: high
Prototype Pollution in JSON5 via Parse Method - https://github.com/advisories/GHSA-9c47-m6qq-7p4h

and that updated package-lock.json.

Fixes #5.

@paulo-ferraz-oliveira
Bump our dependencies, to fix a vulnerability
12109eb 
Locally, we also did `npm audit fix` for

json5  <1.0.2
Severity: high
Prototype Pollution in JSON5 via Parse Method - GHSA-9c47-m6qq-7p4h
@paulo-ferraz-oliveira paulo-ferraz-oliveira self-assigned this Mar 10, 2023
@paulo-ferraz-oliveira paulo-ferraz-oliveira added this to the 1.0.2 milestone Mar 10, 2023
@paulo-ferraz-oliveira paulo-ferraz-oliveira merged commit 0b2858c into main Mar 10, 2023
@paulo-ferraz-oliveira paulo-ferraz-oliveira deleted the fix/vulnerability branch March 10, 2023 22:19
@paulo-ferraz-oliveira paulo-ferraz-oliveira removed their assignment Mar 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
1.0.2
Development

Successfully merging this pull request may close these issues.

Implement a fix for Prototype Pollution in JSON5 via Parse Method
1 participant
@paulo-ferraz-oliveira