Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade swagger-parser to fix vulnerability #333

Merged
merged 2 commits into from
Dec 19, 2022
Merged

Upgrade swagger-parser to fix vulnerability #333

merged 2 commits into from
Dec 19, 2022

Commits on Oct 17, 2022

  1. Upgrade swagger-parser to fix vulnerability 

    Fixes Vulnerability with dependency swagger-parser v10.0.2 Surnet#287.

swagger-parser depends on z-schema, which depends on validator, and the
version that swagger-parser v10.0.2 depends on has a security
vulnerability (GHSA-xx4c-jj58-r7x6).

PR Surnet#300 tried to fix this, but because the version is pinned to 10.0.2
exactly in package.json it hasn't changed the version used.
    @Haegin
    Haegin committed Oct 17, 2022
    Configuration menu
    Copy the full SHA
    4ab3e51 View commit details
    Browse the repository at this point in the history

  2. Update pinned version in package.json 

    Pinning to ^10.0.3 to ensure nothing reintroduces the vulnerable version
    @Haegin
    Haegin committed Oct 17, 2022
    Configuration menu
    Copy the full SHA
    47a0e22 View commit details
    Browse the repository at this point in the history