invisi/xlsx-template
1
0
Fork 0
mirror of https://github.com/optilude/xlsx-template.git synced 2026-07-02 00:17:39 +08:00
Code Issues Packages Projects Releases Wiki Activity

js-yaml has prototype pollution in merge

Browse Source
This commit is contained in:
Andrii Kurdiumov
2026-01-17 09:33:47 +01:00
parent 3f193c7948
commit ab52ae20d7
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package-lock.json
Generated
+5 -4
View File
@@ -6,7 +6,7 @@
"packages": {
"": {
"name": "xlsx-template",
"version": "1.4.5",
"version": "1.4.7",
"license": "MIT",
"dependencies": {
"@kant2002/jszip": "2.7.1",
@@ -2933,10 +2933,11 @@
"license": "MIT"
},
"node_modules/js-yaml": {
"version": "3.14.1",
"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
"integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==",
"version": "3.14.2",
"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
"integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
"dev": true,
"license": "MIT",
"dependencies": {
"argparse": "^1.0.7",
"esprima": "^4.0.0"