fastify-xml-body-parser
fastify-xml-body-parser copied to clipboard
[Snyk] Security upgrade fast-xml-parser from 4.1.2 to 4.2.4
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
| 661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-FASTXMLPARSER-5668858 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: fast-xml-parser
The new version differs by 25 commits.- ecf6016 update package
- 0955739 fix: security bug
- abfee16 update package detail
- 39b0e05 fix security bug
- e7728af update funding detail
- c7b3cea update package detail
- 6511e07 fix unpaired tag
- b6cad83 Update bug-report-or-unexpected-output.md
- dfd25bf Update greetings.yml
- b4d3011 update funding detail
- 319d8b5 update package detail
- d6c5630 fix jpath after unpaired node
- 97713ad Fixed typo in 2.XMLparseOptions.md (#561)
- aa5d731 update package detail
- 652a29e support updateTag
- 5d4d846 support updateAttributes
- e2f1713 update package detail
- a0d881f update checklist
- 97fc210 support oneListGroup
- 256cfd4 IsArray option isn't parsing tags with 0 as value correctly #490 (#557)
- 79a470e refactor(types): allow to omit options when creating a XMLBuilder instance (#556)
- 292fb78 update package
- a4bdced fix #546: Support complex entity value
- a874ce7 Update publish-please
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons: