New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

upgrade to fast-xml-parser 4.1.3 due to security reasons #35

Merged

sindresorhus merged 2 commits into sindresorhus:main from gartcimore:main

Feb 28, 2023

Contributor

gartcimore commented Feb 27, 2023

see https://security.snyk.io/vuln/SNYK-JS-FASTXMLPARSER-3325616
Prototype Pollution Affecting fast-xml-parser package, versions <4.1.2


          upgrade to fast-xml-parser 4.1.3

7ec2574

gartcimore force-pushed the main branch from 486146b to 7ec2574 Compare

February 27, 2023 09:01

Contributor Author

gartcimore commented Feb 27, 2023

node 6 being end of life since 2019-04-30 (https://github.com/nodejs/release#release-schedule) maybe it can be removed from the CI jobs


          Update package.json

25705ea

sindresorhus merged commit 98725ee into sindresorhus:main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment