Skip to content

Commit

Permalink
fix(deps): update dependency fast-json-patch to v3.1.1 [security] (#2784
Browse files Browse the repository at this point in the history
)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [fast-json-patch](https://togithub.com/Starcounter-Jack/JSON-Patch) |
[`3.1.0` ->
`3.1.1`](https://renovatebot.com/diffs/npm/fast-json-patch/3.1.0/3.1.1)
|
[![age](https://badges.renovateapi.com/packages/npm/fast-json-patch/3.1.1/age-slim)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://badges.renovateapi.com/packages/npm/fast-json-patch/3.1.1/adoption-slim)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://badges.renovateapi.com/packages/npm/fast-json-patch/3.1.1/compatibility-slim/3.1.0)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://badges.renovateapi.com/packages/npm/fast-json-patch/3.1.1/confidence-slim/3.1.0)](https://docs.renovatebot.com/merge-confidence/)
|

### GitHub Vulnerability Alerts

#### [CVE-2021-4279](https://nvd.nist.gov/vuln/detail/CVE-2021-4279)

A vulnerability has been found in Starcounter-Jack JSON-Patch up to
3.1.0 and classified as problematic. This vulnerability affects unknown
code. The manipulation leads to improperly controlled modification of
object prototype attributes ('prototype pollution'). The attack can be
initiated remotely. The exploit has been disclosed to the public and may
be used. Upgrading to version 3.1.1 can address this issue. The name of
the patch is 7ad6af41eabb2d799f698740a91284d762c955c9. It is recommended
to upgrade the affected component. VDB-216778 is the identifier assigned
to this vulnerability.

---

### Release Notes

<details>
<summary>Starcounter-Jack/JSON-Patch</summary>

###
[`v3.1.1`](https://togithub.com/Starcounter-Jack/JSON-Patch/releases/tag/3.1.1)

[Compare
Source](https://togithub.com/Starcounter-Jack/JSON-Patch/compare/v3.1.0...3.1.1)

Security Fix for Prototype Pollution - huntr.dev
[#&#8203;262](https://togithub.com/Starcounter-Jack/JSON-Patch/issues/262)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/Unleash/unleash).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC43NC4yIiwidXBkYXRlZEluVmVyIjoiMzQuNzQuMiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
  • Loading branch information
renovate[bot] committed Jan 1, 2023
1 parent e9e6d61 commit b041825
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions yarn.lock
Expand Up @@ -3534,9 +3534,9 @@ fast-glob@^3.2.11, fast-glob@^3.2.9:
micromatch "^4.0.4"

fast-json-patch@^3.1.0:
version "3.1.0"
resolved "https://registry.npmjs.org/fast-json-patch/-/fast-json-patch-3.1.0.tgz"
integrity sha512-IhpytlsVTRndz0hU5t0/MGzS/etxLlfrpG5V5M9mVbuj9TrJLWaMfsox9REM5rkuGX0T+5qjpe8XA1o0gZ42nA==
version "3.1.1"
resolved "https://registry.yarnpkg.com/fast-json-patch/-/fast-json-patch-3.1.1.tgz#85064ea1b1ebf97a3f7ad01e23f9337e72c66947"
integrity sha512-vf6IHUX2SBcA+5/+4883dsIjpBTqmfBjmYiWK1savxQmFk4JfBMLa7ynTYOs1Rolp/T1betJxHiGD3g1Mn8lUQ==

fast-json-stable-stringify@^2.0.0, fast-json-stable-stringify@^2.1.0:
version "2.1.0"
Expand Down

0 comments on commit b041825

Please sign in to comment.