Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump jsonpath-plus to ^10.0.0 to mitigate CVE-2024-21534 #15

Closed
wants to merge 1 commit into from

Conversation

coreydaley
Copy link

Builds upon #13 by updating the package-lock.json file to include jsonpath-plus 10.1.0

Closes #13

…bility

Signed-off-by: Nowacki, Kacper <kacper.nowacki@dynatrace.com>
Copy link

@coreydaley
Copy link
Author

@P0lip Would you mind taking a look at this?

@coreydaley
Copy link
Author

@P0lip bump

@P0lip
Copy link
Owner

P0lip commented Nov 17, 2024

@coreydaley thanks for the PR.
I went ahead and removed jsonpath-plus entirely in 17faf59.
It was only used in one test suite, not as an actual dependency.

@P0lip P0lip closed this Nov 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants