From 423b759f5d1e96ce614b4e74d605b3d2982a3005 Mon Sep 17 00:00:00 2001 From: Johannes Marx Date: Mon, 28 Oct 2024 13:22:48 +0100 Subject: [PATCH] chore(deps): update jsonpath-plus to fix CVE-2024-21534 --- packages/core/package.json | 2 +- yarn.lock | 18 ++---------------- 2 files changed, 3 insertions(+), 17 deletions(-) diff --git a/packages/core/package.json b/packages/core/package.json index 3c25f69a6..e81f50c44 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -47,7 +47,7 @@ "ajv-errors": "~3.0.0", "ajv-formats": "~2.1.0", "es-aggregate-error": "^1.0.7", - "jsonpath-plus": "10.0.0", + "jsonpath-plus": "10.1.0", "lodash": "~4.17.21", "lodash.topath": "^4.5.2", "minimatch": "3.1.2", diff --git a/yarn.lock b/yarn.lock index d3d7ecdb5..551100668 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2975,7 +2975,7 @@ __metadata: ajv-errors: ~3.0.0 ajv-formats: ~2.1.0 es-aggregate-error: ^1.0.7 - jsonpath-plus: 10.0.0 + jsonpath-plus: 10.1.0 lodash: ~4.17.21 lodash.topath: ^4.5.2 minimatch: 3.1.2 @@ -9279,21 +9279,7 @@ __metadata: languageName: node linkType: hard -"jsonpath-plus@npm:10.0.0": - version: 10.0.0 - resolution: "jsonpath-plus@npm:10.0.0" - dependencies: - "@jsep-plugin/assignment": ^1.2.1 - "@jsep-plugin/regex": ^1.0.3 - jsep: ^1.3.9 - bin: - jsonpath: bin/jsonpath-cli.js - jsonpath-plus: bin/jsonpath-cli.js - checksum: 992a62a0a5d2b96b40389de0608943840db39b466f9d3c1d71b4801e34b8d397c74811213e24e33c833b74aa83d9ce7860c1e7e0bc29980161489ea4a3962ecf - languageName: node - linkType: hard - -"jsonpath-plus@npm:^6.0.1 || ^10.1.0": +"jsonpath-plus@npm:10.1.0, jsonpath-plus@npm:^6.0.1 || ^10.1.0": version: 10.1.0 resolution: "jsonpath-plus@npm:10.1.0" dependencies: