Infrastructure/astro
0
Fork 0
mirror of https://github.com/withastro/astro.git synced 2025-03-24 23:21:57 -05:00
Code Issues Activity

[CVE 2024-47764] Update package 'cookie' (#12132)

Browse source
This commit is contained in:
Julien Cayzac 2024-10-07 15:45:50 +09:00 • committed by GitHub
parent c8baa387b6
commit de35daa851
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 11 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
.changeset/twenty-spoons-sneeze.md Normal file
View file

@ -0,0 +1,5 @@
---
'astro': patch
---
Updates the [`cookie`](https://npmjs.com/package/cookie) dependency to avoid the [CVE 2024-47764](https://nvd.nist.gov/vuln/detail/CVE-2024-47764) vulnerability.

2
packages/astro/package.json
View file

@ -140,7 +140,7 @@
"ci-info": "^4.0.0",
"clsx": "^2.1.1",
"common-ancestor-path": "^1.0.1",
"cookie": "^0.6.0",
"cookie": "^0.7.1",
"cssesc": "^3.0.0",
"debug": "^4.3.7",
"deterministic-object-hash": "^2.0.2",

10
pnpm-lock.yaml generated
View file

@ -607,8 +607,8 @@ importers:
specifier: ^1.0.1
version: 1.0.1
cookie:
specifier: ^0.6.0
version: 0.6.0
specifier: ^0.7.1
version: 0.7.1
cssesc:
specifier: ^3.0.0
version: 3.0.0
@ -7774,8 +7774,8 @@ packages:
convert-source-map@2.0.0:
resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
cookie@0.6.0:
resolution: {integrity: sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==}
cookie@0.7.1:
resolution: {integrity: sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==}
engines: {node: '>= 0.6'}
copy-anything@3.0.5:
@ -13519,7 +13519,7 @@ snapshots:
convert-source-map@2.0.0: {}
cookie@0.6.0: {}
cookie@0.7.1: {}
copy-anything@3.0.5:
dependencies: