mirror of
				https://github.com/advplyr/audiobookshelf.git
				synced 2025-10-27 11:18:14 +01:00 
			
		
		
		
	Address three CVEs
Addresses CVE-2021-3749 (HIGH), CVE-2022-0155 (HIGH), and CVE-2022-0536 (MEDIUM).
This commit is contained in:
		
							parent
							
								
									0e3640c246
								
							
						
					
					
						commit
						c98409b9ae
					
				
							
								
								
									
										66
									
								
								package-lock.json
									
									
									
										generated
									
									
									
								
							
							
						
						
									
										66
									
								
								package-lock.json
									
									
									
										generated
									
									
									
								
							| @ -9,7 +9,7 @@ | ||||
|       "license": "GPL-3.0", | ||||
|       "dependencies": { | ||||
|         "archiver": "^5.3.0", | ||||
|         "axios": "^0.21.1", | ||||
|         "axios": "^0.26.1", | ||||
|         "bcryptjs": "^2.4.3", | ||||
|         "command-line-args": "^5.2.0", | ||||
|         "date-and-time": "^2.0.1", | ||||
| @ -53,9 +53,11 @@ | ||||
|       "version": "2.1.1", | ||||
|       "resolved": "https://registry.npmjs.org/@sindresorhus/is/-/is-2.1.1.tgz", | ||||
|       "integrity": "sha512-/aPsuoj/1Dw/kzhkgz+ES6TxG0zfTMGLwuK2ZG00k/iJzYHTLCE8mVU8EPqEOp/lmxPoq1C1C9RYToRKb2KEfg==", | ||||
|       "funding": "https://github.com/sindresorhus/is?sponsor=1", | ||||
|       "engines": { | ||||
|         "node": ">=10" | ||||
|       }, | ||||
|       "funding": { | ||||
|         "url": "https://github.com/sindresorhus/is?sponsor=1" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/@socket.io/base64-arraybuffer": { | ||||
| @ -232,11 +234,11 @@ | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/axios": { | ||||
|       "version": "0.21.1", | ||||
|       "resolved": "https://registry.npmjs.org/axios/-/axios-0.21.1.tgz", | ||||
|       "integrity": "sha512-dKQiRHxGD9PPRIUNIWvZhPTPpl1rf/OxTYKsqKUDjBwYylTvV7SjSHJb9ratfyzM6wCdLCOYLzs73qpg5c4iGA==", | ||||
|       "version": "0.26.1", | ||||
|       "resolved": "https://registry.npmjs.org/axios/-/axios-0.26.1.tgz", | ||||
|       "integrity": "sha512-fPwcX4EvnSHuInCMItEhAGnaSEXRBjtzh9fOtsE6E1G6p7vl7edEeZe11QHf18+6+9gR5PbKV/sGKNaD8YaMeA==", | ||||
|       "dependencies": { | ||||
|         "follow-redirects": "^1.10.0" | ||||
|         "follow-redirects": "^1.14.8" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/balanced-match": { | ||||
| @ -504,7 +506,7 @@ | ||||
|         "printj": "~1.1.0" | ||||
|       }, | ||||
|       "bin": { | ||||
|         "crc32": "./bin/crc32.njs" | ||||
|         "crc32": "bin/crc32.njs" | ||||
|       }, | ||||
|       "engines": { | ||||
|         "node": ">=0.8" | ||||
| @ -544,21 +546,25 @@ | ||||
|       "version": "6.0.0", | ||||
|       "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz", | ||||
|       "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==", | ||||
|       "funding": "https://github.com/sponsors/sindresorhus", | ||||
|       "dependencies": { | ||||
|         "mimic-response": "^3.1.0" | ||||
|       }, | ||||
|       "engines": { | ||||
|         "node": ">=10" | ||||
|       }, | ||||
|       "funding": { | ||||
|         "url": "https://github.com/sponsors/sindresorhus" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/decompress-response/node_modules/mimic-response": { | ||||
|       "version": "3.1.0", | ||||
|       "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz", | ||||
|       "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==", | ||||
|       "funding": "https://github.com/sponsors/sindresorhus", | ||||
|       "engines": { | ||||
|         "node": ">=10" | ||||
|       }, | ||||
|       "funding": { | ||||
|         "url": "https://github.com/sponsors/sindresorhus" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/defer-to-connect": { | ||||
| @ -813,9 +819,9 @@ | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/follow-redirects": { | ||||
|       "version": "1.14.1", | ||||
|       "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.1.tgz", | ||||
|       "integrity": "sha512-HWqDgT7ZEkqRzBvc2s64vSZ/hfOceEol3ac/7tKwzuvEyWx3/4UegXh5oBOIotkGsObyk3xznnSRVADBgWSQVg==", | ||||
|       "version": "1.14.9", | ||||
|       "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.9.tgz", | ||||
|       "integrity": "sha512-MQDfihBQYMcyy5dhRDJUHcw7lb2Pv/TuE6xP1vyraLukNDHKbDxDNaOE3NbCAdKQApno+GPRyo1YAp89yCjK4w==", | ||||
|       "funding": [ | ||||
|         { | ||||
|           "type": "individual", | ||||
| @ -874,12 +880,14 @@ | ||||
|       "version": "5.2.0", | ||||
|       "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-5.2.0.tgz", | ||||
|       "integrity": "sha512-nBF+F1rAZVCu/p7rjzgA+Yb4lfYXrpl7a6VmJrU8wF9I1CKvP/QwPNZHnOlwbTkY6dvtFIzFMSyQXbLoTQPRpA==", | ||||
|       "funding": "https://github.com/sponsors/sindresorhus", | ||||
|       "dependencies": { | ||||
|         "pump": "^3.0.0" | ||||
|       }, | ||||
|       "engines": { | ||||
|         "node": ">=8" | ||||
|       }, | ||||
|       "funding": { | ||||
|         "url": "https://github.com/sponsors/sindresorhus" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/glob": { | ||||
| @ -905,7 +913,6 @@ | ||||
|       "version": "11.3.0", | ||||
|       "resolved": "https://registry.npmjs.org/got/-/got-11.3.0.tgz", | ||||
|       "integrity": "sha512-yi/kiZY2tNMtt5IfbfX8UL3hAZWb2gZruxYZ72AY28pU5p0TZjZdl0uRsuaFbnC0JopdUi3I+Mh1F3dPQ9Dh0Q==", | ||||
|       "funding": "https://github.com/sindresorhus/got?sponsor=1", | ||||
|       "dependencies": { | ||||
|         "@sindresorhus/is": "^2.1.1", | ||||
|         "@szmarczak/http-timer": "^4.0.5", | ||||
| @ -922,6 +929,9 @@ | ||||
|       }, | ||||
|       "engines": { | ||||
|         "node": ">=10.19.0" | ||||
|       }, | ||||
|       "funding": { | ||||
|         "url": "https://github.com/sindresorhus/got?sponsor=1" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/graceful-fs": { | ||||
| @ -1386,9 +1396,11 @@ | ||||
|       "version": "6.1.0", | ||||
|       "resolved": "https://registry.npmjs.org/normalize-url/-/normalize-url-6.1.0.tgz", | ||||
|       "integrity": "sha512-DlL+XwOy3NxAQ8xuC0okPgK46iuVNAK01YN7RueYBqqFeGsBjV9XmCAzAdgt+667bCl5kPh9EqKKDwnaPG1I7A==", | ||||
|       "funding": "https://github.com/sponsors/sindresorhus", | ||||
|       "engines": { | ||||
|         "node": ">=10" | ||||
|       }, | ||||
|       "funding": { | ||||
|         "url": "https://github.com/sponsors/sindresorhus" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/object-assign": { | ||||
| @ -1476,7 +1488,7 @@ | ||||
|       "resolved": "https://registry.npmjs.org/printj/-/printj-1.1.2.tgz", | ||||
|       "integrity": "sha512-zA2SmoLaxZyArQTOPj5LXecR+RagfPSU5Kw1qP+jkWeNlrq+eJZyY2oS68SU1Z/7/myXM4lo9716laOFAVStCQ==", | ||||
|       "bin": { | ||||
|         "printj": "./bin/printj.njs" | ||||
|         "printj": "bin/printj.njs" | ||||
|       }, | ||||
|       "engines": { | ||||
|         "node": ">=0.8" | ||||
| @ -1535,9 +1547,11 @@ | ||||
|       "version": "5.1.1", | ||||
|       "resolved": "https://registry.npmjs.org/quick-lru/-/quick-lru-5.1.1.tgz", | ||||
|       "integrity": "sha512-WuyALRjWPDGtt/wzJiadO5AXY+8hZ80hVpe6MyivgraREW751X3SbhRvG3eLKOYN+8VEvqLcf3wdnt44Z4S4SA==", | ||||
|       "funding": "https://github.com/sponsors/sindresorhus", | ||||
|       "engines": { | ||||
|         "node": ">=10" | ||||
|       }, | ||||
|       "funding": { | ||||
|         "url": "https://github.com/sponsors/sindresorhus" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/range-parser": { | ||||
| @ -1695,7 +1709,7 @@ | ||||
|       "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz", | ||||
|       "integrity": "sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ==", | ||||
|       "bin": { | ||||
|         "semver": "./bin/semver" | ||||
|         "semver": "bin/semver" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/send": { | ||||
| @ -2011,7 +2025,7 @@ | ||||
|         "isexe": "^2.0.0" | ||||
|       }, | ||||
|       "bin": { | ||||
|         "which": "./bin/which" | ||||
|         "which": "bin/which" | ||||
|       } | ||||
|     }, | ||||
|     "node_modules/with-open-file": { | ||||
| @ -2255,11 +2269,11 @@ | ||||
|       "integrity": "sha512-Xcz9l0z7y9yQ9rdDaxlmaI4uJHf/T8g9hOEzJcsEqX2SjCj4J20uK7+ldkDHMbpJDK76wF7xEIgxc/vSlsfw5w==" | ||||
|     }, | ||||
|     "axios": { | ||||
|       "version": "0.21.1", | ||||
|       "resolved": "https://registry.npmjs.org/axios/-/axios-0.21.1.tgz", | ||||
|       "integrity": "sha512-dKQiRHxGD9PPRIUNIWvZhPTPpl1rf/OxTYKsqKUDjBwYylTvV7SjSHJb9ratfyzM6wCdLCOYLzs73qpg5c4iGA==", | ||||
|       "version": "0.26.1", | ||||
|       "resolved": "https://registry.npmjs.org/axios/-/axios-0.26.1.tgz", | ||||
|       "integrity": "sha512-fPwcX4EvnSHuInCMItEhAGnaSEXRBjtzh9fOtsE6E1G6p7vl7edEeZe11QHf18+6+9gR5PbKV/sGKNaD8YaMeA==", | ||||
|       "requires": { | ||||
|         "follow-redirects": "^1.10.0" | ||||
|         "follow-redirects": "^1.14.8" | ||||
|       } | ||||
|     }, | ||||
|     "balanced-match": { | ||||
| @ -2705,9 +2719,9 @@ | ||||
|       } | ||||
|     }, | ||||
|     "follow-redirects": { | ||||
|       "version": "1.14.1", | ||||
|       "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.1.tgz", | ||||
|       "integrity": "sha512-HWqDgT7ZEkqRzBvc2s64vSZ/hfOceEol3ac/7tKwzuvEyWx3/4UegXh5oBOIotkGsObyk3xznnSRVADBgWSQVg==" | ||||
|       "version": "1.14.9", | ||||
|       "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.9.tgz", | ||||
|       "integrity": "sha512-MQDfihBQYMcyy5dhRDJUHcw7lb2Pv/TuE6xP1vyraLukNDHKbDxDNaOE3NbCAdKQApno+GPRyo1YAp89yCjK4w==" | ||||
|     }, | ||||
|     "forwarded": { | ||||
|       "version": "0.2.0", | ||||
|  | ||||
| @ -28,7 +28,7 @@ | ||||
|   "license": "GPL-3.0", | ||||
|   "dependencies": { | ||||
|     "archiver": "^5.3.0", | ||||
|     "axios": "^0.21.1", | ||||
|     "axios": "^0.26.1", | ||||
|     "bcryptjs": "^2.4.3", | ||||
|     "command-line-args": "^5.2.0", | ||||
|     "date-and-time": "^2.0.1", | ||||
|  | ||||
		Loading…
	
		Reference in New Issue
	
	Block a user