[CVE 2024-47764] Update package 'cookie' (#12132)

jcayzac · web-flow · commit de35daa85175 · 2024-10-07T14:45:50.000+08:00
diff --git a/.changeset/twenty-spoons-sneeze.md b/.changeset/twenty-spoons-sneeze.md
@@ -0,0 +1,5 @@
+---
+'astro': patch
+---
+
+Updates the [`cookie`](https://npmjs.com/package/cookie) dependency to avoid the [CVE 2024-47764](https://nvd.nist.gov/vuln/detail/CVE-2024-47764) vulnerability.
diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -140,7 +140,7 @@
     "ci-info": "^4.0.0",
     "clsx": "^2.1.1",
     "common-ancestor-path": "^1.0.1",
-    "cookie": "^0.6.0",
+    "cookie": "^0.7.1",
     "cssesc": "^3.0.0",
     "debug": "^4.3.7",
     "deterministic-object-hash": "^2.0.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
