@aws-amplify/datastore@5.1.9
Patch Changes
-
#14872
9a3041cThanks @osama-rizk! - fix(datastore): bump immer to ^11.1.9 to remediate prototype pollution@aws-amplify/datastoredepended onimmer@9.0.6, which is vulnerable to prototype pollution viadraft.constructor.prototype(affects immer 4.0.0–11.1.8; bypasses the earlier CVE-2021-23436 remediation). Bump immer to^11.1.9, the first fixed release. DataStore uses only stable immer core APIs (produce,Draft,immerable,setAutoFreeze,enablePatches,Patch,applyPatches), which are preserved across the 9 → 11 major versions. -
Updated dependencies []:
- @aws-amplify/api@6.3.28
- @aws-amplify/api-graphql@4.8.9