From 906e7ba4272737c2dc3e999c0b83b5ee05c84d58 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Piotr=20B=C5=82a=C5=BCejewicz=20=28Peter=20Blazejewicz=29?= Date: Mon, 9 Sep 2024 15:11:25 +0200 Subject: [PATCH] [fix][CVE-2024-27307] update jsonata dependency (#2159) This is a minor change bumping `jsonata` following security advisory note that tagged this package vulnerability as critical: https://www.cve.org/CVERecord?id=CVE-2024-27307 https://github.com/jsonata-js/jsonata/security/advisories/GHSA-fqg8-vfv7-8fj8 Got this through Webstorm extension taggin dependency issue. Thanks! --- package-lock.json | 15 ++++++++------- package.json | 2 +- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 5bc84e105..7df1bf621 100644 --- a/package-lock.json +++ b/package-lock.json @@ -58,7 +58,7 @@ "globby": "^13.2.2", "husky": "^8.0.3", "jsdom": "^22.1.0", - "jsonata": "^2.0.3", + "jsonata": "^2.0.4", "lint-staged": "^14.0.1", "lunr": "^2.3.9", "markdown-it-container": "^3.0.0", @@ -11312,10 +11312,11 @@ } }, "node_modules/jsonata": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/jsonata/-/jsonata-2.0.3.tgz", - "integrity": "sha512-Up2H81MUtjqI/dWwWX7p4+bUMfMrQJVMN/jW6clFMTiYP528fBOBNtRu944QhKTs3+IsVWbgMeUTny5fw2VMUA==", + "version": "2.0.5", + "resolved": "https://registry.npmjs.org/jsonata/-/jsonata-2.0.5.tgz", + "integrity": "sha512-wEse9+QLIIU5IaCgtJCPsFi/H4F3qcikWzF4bAELZiRz08ohfx3Q6CjDRf4ZPF5P/92RI3KIHtb7u3jqPaHXdQ==", "dev": true, + "license": "MIT", "engines": { "node": ">= 8" } @@ -27299,9 +27300,9 @@ "dev": true }, "jsonata": { - "version": "2.0.3", - "resolved": "https://registry.npmjs.org/jsonata/-/jsonata-2.0.3.tgz", - "integrity": "sha512-Up2H81MUtjqI/dWwWX7p4+bUMfMrQJVMN/jW6clFMTiYP528fBOBNtRu944QhKTs3+IsVWbgMeUTny5fw2VMUA==", + "version": "2.0.5", + "resolved": "https://registry.npmjs.org/jsonata/-/jsonata-2.0.5.tgz", + "integrity": "sha512-wEse9+QLIIU5IaCgtJCPsFi/H4F3qcikWzF4bAELZiRz08ohfx3Q6CjDRf4ZPF5P/92RI3KIHtb7u3jqPaHXdQ==", "dev": true }, "jsonfile": { diff --git a/package.json b/package.json index 0b7500841..0277f3f60 100644 --- a/package.json +++ b/package.json @@ -116,7 +116,7 @@ "globby": "^13.2.2", "husky": "^8.0.3", "jsdom": "^22.1.0", - "jsonata": "^2.0.3", + "jsonata": "^2.0.4", "lint-staged": "^14.0.1", "lunr": "^2.3.9", "markdown-it-container": "^3.0.0",