Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the version of protobufjs, resolve CVE-2023-36665 #313

Merged
merged 2 commits into from
Jul 24, 2023
Merged

Bump the version of protobufjs, resolve CVE-2023-36665 #313

merged 2 commits into from
Jul 24, 2023

Conversation

justinvp
Copy link
Member

@justinvp justinvp commented Jul 24, 2023 •
edited
Loading

  • Bump protobufjs to the latest 7.x major version
  • Addresses CVE-2023-36665

Fixes #311

@justinvp justinvp requested a review from a team July 24, 2023 21:09
@justinvp justinvp merged commit 1f97d95 into master Jul 24, 2023
4 checks passed
@justinvp justinvp deleted the justin/protobufjs branch July 24, 2023 21:16
@justinvp justinvp mentioned this pull request Jul 24, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dixler dixler dixler approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Second protobufjs CVE requiring a major version upgrade
2 participants
@justinvp @dixler