Skip to content

Commit a6a9e8b

Browse files
authored
Fix security vulnerabilities in qs and uuid dependencies (#5110)
1 parent bf18e60 commit a6a9e8b

2 files changed

Lines changed: 11 additions & 21 deletions

File tree

package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,8 @@
5151
},
5252
"resolutions": {
5353
"serialize-javascript": "^7.0.5",
54-
"serve-handler/minimatch": "3.1.4"
54+
"serve-handler/minimatch": "3.1.4",
55+
"qs": "^6.15.2",
56+
"uuid": "^11.1.1"
5557
}
5658
}

yarn.lock

Lines changed: 8 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -14249,17 +14249,10 @@ pvutils@^1.1.3, pvutils@^1.1.5:
1424914249
resolved "https://registry.yarnpkg.com/pvutils/-/pvutils-1.1.5.tgz#84b0dea4a5d670249aa9800511804ee0b7c2809c"
1425014250
integrity sha512-KTqnxsgGiQ6ZAzZCVlJH5eOjSnvlyEgx1m8bkRJfOhmGRqfo5KLvmAlACQkrjEtOQ4B7wF9TdSLIs9O90MX9xA==
1425114251

14252-
qs@~6.14.0:
14253-
version "6.14.2"
14254-
resolved "https://registry.yarnpkg.com/qs/-/qs-6.14.2.tgz#b5634cf9d9ad9898e31fba3504e866e8efb6798c"
14255-
integrity sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==
14256-
dependencies:
14257-
side-channel "^1.1.0"
14258-
14259-
qs@~6.15.1:
14260-
version "6.15.1"
14261-
resolved "https://registry.yarnpkg.com/qs/-/qs-6.15.1.tgz#bdb55aed06bfac257a90c44a446a73fba5575c8f"
14262-
integrity sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==
14252+
qs@^6.15.2, qs@~6.14.0, qs@~6.15.1:
14253+
version "6.15.2"
14254+
resolved "https://registry.yarnpkg.com/qs/-/qs-6.15.2.tgz#fd55426d710403ddccc45e0f9eab16db7727ece9"
14255+
integrity sha512-Rzq0KEyX/w/tEybncDgdkZrJgVUsUMk3xjh3t5bv3S1HTAtg+uOYt72+ZfwiQwKdysThkTBdL/rTi6HDmX9Ddw==
1426314256
dependencies:
1426414257
side-channel "^1.1.0"
1426514258

@@ -16861,15 +16854,10 @@ utils-merge@1.0.1:
1686116854
resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713"
1686216855
integrity sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==
1686316856

16864-
"uuid@^11.1.0 || ^12 || ^13 || ^14.0.0":
16865-
version "14.0.0"
16866-
resolved "https://registry.yarnpkg.com/uuid/-/uuid-14.0.0.tgz#0af883220163d264ffe0c084f6b8a89b9666966d"
16867-
integrity sha512-Qo+uWgilfSmAhXCMav1uYFynlQO7fMFiMVZsQqZRMIXp0O7rR7qjkj+cPvBHLgBqi960QCoo/PH2/6ZtVqKvrg==
16868-
16869-
uuid@^8.3.2:
16870-
version "8.3.2"
16871-
resolved "https://registry.yarnpkg.com/uuid/-/uuid-8.3.2.tgz#80d5b5ced271bb9af6c445f21a1a04c606cefbe2"
16872-
integrity sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==
16857+
"uuid@^11.1.0 || ^12 || ^13 || ^14.0.0", uuid@^11.1.1, uuid@^8.3.2:
16858+
version "11.1.1"
16859+
resolved "https://registry.yarnpkg.com/uuid/-/uuid-11.1.1.tgz#f6d81d2e1c65d00762e5e29b16c5d2d995e208ad"
16860+
integrity sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==
1687316861

1687416862
uvu@^0.5.0:
1687516863
version "0.5.6"

0 commit comments

Comments
 (0)