From de91cfcd87123debeb2777504921eed8ec55e26f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 8 Jun 2023 00:06:13 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-FASTXMLPARSER-5668858 --- package-lock.json | 28 +++++++++++++++++----------- package.json | 2 +- 2 files changed, 18 insertions(+), 12 deletions(-) diff --git a/package-lock.json b/package-lock.json index ddb6be36439da..29a0d9b1ac3de 100644 --- a/package-lock.json +++ b/package-lock.json @@ -27,7 +27,7 @@ "decamelize": "^3.2.0", "emojic": "^1.1.17", "escape-string-regexp": "^4.0.0", - "fast-xml-parser": "^4.0.13", + "fast-xml-parser": "^4.2.4", "glob": "^8.0.3", "global-agent": "^3.0.0", "got": "^12.5.3", @@ -13497,18 +13497,24 @@ "integrity": "sha1-PYpcZog6FqMMqGQ+hR8Zuqd5eRc=" }, "node_modules/fast-xml-parser": { - "version": "4.0.13", - "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-4.0.13.tgz", - "integrity": "sha512-g+OboAw8ol1FgTHhKLR7ZHcItNudceiY04BBrvqa0JBWoPhi/+e5r4H5AeW+EsQCroJLJwsuOP3dD3c6cc5uOg==", + "version": "4.2.4", + "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-4.2.4.tgz", + "integrity": "sha512-fbfMDvgBNIdDJLdLOwacjFAPYt67tr31H9ZhWSm45CDAxvd0I6WTlSOUo7K2P/K5sA5JgMKG64PI3DMcaFdWpQ==", + "funding": [ + { + "type": "paypal", + "url": "https://paypal.me/naturalintelligence" + }, + { + "type": "github", + "url": "https://github.com/sponsors/NaturalIntelligence" + } + ], "dependencies": { "strnum": "^1.0.5" }, "bin": { "fxparser": "src/cli/cli.js" - }, - "funding": { - "type": "paypal", - "url": "https://paypal.me/naturalintelligence" } }, "node_modules/fastest-levenshtein": { @@ -40263,9 +40269,9 @@ "integrity": "sha1-PYpcZog6FqMMqGQ+hR8Zuqd5eRc=" }, "fast-xml-parser": { - "version": "4.0.13", - "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-4.0.13.tgz", - "integrity": "sha512-g+OboAw8ol1FgTHhKLR7ZHcItNudceiY04BBrvqa0JBWoPhi/+e5r4H5AeW+EsQCroJLJwsuOP3dD3c6cc5uOg==", + "version": "4.2.4", + "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-4.2.4.tgz", + "integrity": "sha512-fbfMDvgBNIdDJLdLOwacjFAPYt67tr31H9ZhWSm45CDAxvd0I6WTlSOUo7K2P/K5sA5JgMKG64PI3DMcaFdWpQ==", "requires": { "strnum": "^1.0.5" } diff --git a/package.json b/package.json index 38cb369514015..fb5af9332a5d2 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ "decamelize": "^3.2.0", "emojic": "^1.1.17", "escape-string-regexp": "^4.0.0", - "fast-xml-parser": "^4.0.13", + "fast-xml-parser": "^4.2.4", "glob": "^8.0.3", "global-agent": "^3.0.0", "got": "^12.5.3",