Skip to content

Commit ce87ea8

Browse files
fix: dset prototype pollution vulnerability (#15253)
Fixes [Dependabot Alert 123](https://github.com/twentyhq/twenty/security/dependabot/123) - dset prototype pollution vulnerability. Used `yarn up dset --recursive` to update the patch versions. Two parent packages depend on dset - `@graphql-tools/utils` and `graphql-yoga`. Both allow patch version updates with `^` - `^3.1.1` and `^3.1.2`.
1 parent be85f37 commit ce87ea8

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30837,9 +30837,9 @@ __metadata:
3083730837
linkType: hard
3083830838

3083930839
"dset@npm:^3.1.1, dset@npm:^3.1.2":
30840-
version: 3.1.3
30841-
resolution: "dset@npm:3.1.3"
30842-
checksum: 10c0/b1ff68f1f42af373baa85b00b04d89094cd0d7f74f94bd11364cba575f2762ed52a0a0503bbfcc92eccd07c6d55426813c8a7a6cfa020338eaea1f4edfd332c2
30840+
version: 3.1.4
30841+
resolution: "dset@npm:3.1.4"
30842+
checksum: 10c0/b67bbd28dd8a539e90c15ffb61100eb64ef995c5270a124d4f99bbb53f4d82f55a051b731ba81f3215dd9dce2b4c8d69927dc20b3be1c5fc88bab159467aa438
3084330843
languageName: node
3084430844
linkType: hard
3084530845

0 commit comments

Comments
 (0)