fix: address `Prototype Pollution via parse() in NodeJS flatted` (#445)
5dfda65 · Paulo F. Oliveira · 2026-03-28 23:59
Message
{commit_body(@commit)}
Files changed
modified
package-lock.json
+12
−12
@@ -651,9 +651,9 @@
| 651 | 651 | "license": "MIT" |
| 652 | 652 | }, |
| 653 | 653 | "node_modules/brace-expansion": { |
| 654 | − "version": "5.0.4", | |
| 655 | − "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.4.tgz", | |
| 656 | − "integrity": "sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==", | |
| 654 | + "version": "5.0.5", | |
| 655 | + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz", | |
| 656 | + "integrity": "sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==", | |
| 657 | 657 | "dev": true, |
| 658 | 658 | "license": "MIT", |
| 659 | 659 | "dependencies": { |
@@ -1599,9 +1599,9 @@
| 1599 | 1599 | } |
| 1600 | 1600 | }, |
| 1601 | 1601 | "node_modules/flatted": { |
| 1602 | − "version": "3.3.4", | |
| 1603 | − "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.4.tgz", | |
| 1604 | − "integrity": "sha512-3+mMldrTAPdta5kjX2G2J7iX4zxtnwpdA8Tr2ZSjkyPSanvbZAcy6flmtnXbEybHrDcU9641lxrMfFuUxVz9vA==", | |
| 1602 | + "version": "3.4.2", | |
| 1603 | + "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz", | |
| 1604 | + "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==", | |
| 1605 | 1605 | "dev": true, |
| 1606 | 1606 | "license": "ISC" |
| 1607 | 1607 | }, |
@@ -3312,9 +3312,9 @@
| 3312 | 3312 | } |
| 3313 | 3313 | }, |
| 3314 | 3314 | "node_modules/smol-toml": { |
| 3315 | − "version": "1.6.0", | |
| 3316 | − "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.6.0.tgz", | |
| 3317 | − "integrity": "sha512-4zemZi0HvTnYwLfrpk/CF9LOd9Lt87kAt50GnqhMpyF9U3poDAP2+iukq2bZsO/ufegbYehBkqINbsWxj4l4cw==", | |
| 3315 | + "version": "1.6.1", | |
| 3316 | + "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.6.1.tgz", | |
| 3317 | + "integrity": "sha512-dWUG8F5sIIARXih1DTaQAX4SsiTXhInKf1buxdY9DIg4ZYPZK5nGM1VRIYmEbDbsHt7USo99xSLFu5Q1IqTmsg==", | |
| 3318 | 3318 | "dev": true, |
| 3319 | 3319 | "license": "BSD-3-Clause", |
| 3320 | 3320 | "engines": { |
@@ -3727,9 +3727,9 @@
| 3727 | 3727 | } |
| 3728 | 3728 | }, |
| 3729 | 3729 | "node_modules/yaml": { |
| 3730 | − "version": "2.8.2", | |
| 3731 | − "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz", | |
| 3732 | − "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==", | |
| 3730 | + "version": "2.8.3", | |
| 3731 | + "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz", | |
| 3732 | + "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==", | |
| 3733 | 3733 | "dev": true, |
| 3734 | 3734 | "license": "ISC", |
| 3735 | 3735 | "bin": { |
Parents: ef385d6