1
0
mirror of https://github.com/Unleash/unleash.git synced 2024-12-22 19:07:54 +01:00

fix(deps): update dependency fast-json-patch to v3.1.1 [security] (#2784)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [fast-json-patch](https://togithub.com/Starcounter-Jack/JSON-Patch) |
[`3.1.0` ->
`3.1.1`](https://renovatebot.com/diffs/npm/fast-json-patch/3.1.0/3.1.1)
|
[![age](https://badges.renovateapi.com/packages/npm/fast-json-patch/3.1.1/age-slim)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://badges.renovateapi.com/packages/npm/fast-json-patch/3.1.1/adoption-slim)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://badges.renovateapi.com/packages/npm/fast-json-patch/3.1.1/compatibility-slim/3.1.0)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://badges.renovateapi.com/packages/npm/fast-json-patch/3.1.1/confidence-slim/3.1.0)](https://docs.renovatebot.com/merge-confidence/)
|

### GitHub Vulnerability Alerts

#### [CVE-2021-4279](https://nvd.nist.gov/vuln/detail/CVE-2021-4279)

A vulnerability has been found in Starcounter-Jack JSON-Patch up to
3.1.0 and classified as problematic. This vulnerability affects unknown
code. The manipulation leads to improperly controlled modification of
object prototype attributes ('prototype pollution'). The attack can be
initiated remotely. The exploit has been disclosed to the public and may
be used. Upgrading to version 3.1.1 can address this issue. The name of
the patch is 7ad6af41eabb2d799f698740a91284d762c955c9. It is recommended
to upgrade the affected component. VDB-216778 is the identifier assigned
to this vulnerability.

---

### Release Notes

<details>
<summary>Starcounter-Jack/JSON-Patch</summary>

###
[`v3.1.1`](https://togithub.com/Starcounter-Jack/JSON-Patch/releases/tag/3.1.1)

[Compare
Source](https://togithub.com/Starcounter-Jack/JSON-Patch/compare/v3.1.0...3.1.1)

Security Fix for Prototype Pollution - huntr.dev
[#&#8203;262](https://togithub.com/Starcounter-Jack/JSON-Patch/issues/262)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/Unleash/unleash).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC43NC4yIiwidXBkYXRlZEluVmVyIjoiMzQuNzQuMiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
renovate[bot] 2023-01-01 22:16:59 +00:00 committed by GitHub
parent e9e6d610f4
commit b0418253c1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -3534,9 +3534,9 @@ fast-glob@^3.2.11, fast-glob@^3.2.9:
micromatch "^4.0.4"
fast-json-patch@^3.1.0:
version "3.1.0"
resolved "https://registry.npmjs.org/fast-json-patch/-/fast-json-patch-3.1.0.tgz"
integrity sha512-IhpytlsVTRndz0hU5t0/MGzS/etxLlfrpG5V5M9mVbuj9TrJLWaMfsox9REM5rkuGX0T+5qjpe8XA1o0gZ42nA==
version "3.1.1"
resolved "https://registry.yarnpkg.com/fast-json-patch/-/fast-json-patch-3.1.1.tgz#85064ea1b1ebf97a3f7ad01e23f9337e72c66947"
integrity sha512-vf6IHUX2SBcA+5/+4883dsIjpBTqmfBjmYiWK1savxQmFk4JfBMLa7ynTYOs1Rolp/T1betJxHiGD3g1Mn8lUQ==
fast-json-stable-stringify@^2.0.0, fast-json-stable-stringify@^2.1.0:
version "2.1.0"