Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: CVE 2024 34273 #418

Merged
merged 3 commits into from
Jun 17, 2024
Merged

fix: CVE 2024 34273 #418

merged 3 commits into from
Jun 17, 2024

Conversation

jaredperreault-okta
Copy link
Contributor

PR Checklist

Please check if your PR fulfills the following requirements:

  • The commit message follows our guidelines
  • Tests for the changes have been added (for bug fixes / features)
  • Docs have been added / updated (for bug fixes / features)

PR Type

What kind of change does this PR introduce?

  • Bugfix
  • Feature
  • Code style update (formatting, local variables)
  • Refactoring (no functional changes, no api changes)
  • Adding Tests
  • Build related changes
  • CI related changes
  • Documentation changes
  • Other... Please describe:

What is the current behavior?

Issue Number: N/A

What is the new behavior?

Does this PR introduce a breaking change?

  • Yes
  • No

Other information

Reviewers

uuid "^3.3.2"
uuid "^8.3.2"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

5 majors, no problems? It does seem like we already had it as a transitive dev dependency

=> Found "uuid@8.3.2"
info Has been hoisted to "uuid"
info Reasons this module exists
   - Hoisted from "njwt#uuid"
   - Hoisted from "jest-junit#uuid"
   - Hoisted from "@openapitools#openapi-generator-cli#@nestjs#common#uuid"
   - Hoisted from "@openapitools#openapi-generator-cli#@nestjs#core#uuid"
info Disk size without dependencies: "332KB"
info Disk size with unique dependencies: "332KB"
info Disk size with transitive dependencies: "332KB"
info Number of shared dependencies: 0
=> Found "istanbul-lib-processinfo#uuid@3.4.0"
info This module exists because "nyc#istanbul-lib-processinfo" depends on it.
info Disk size without dependencies: "92KB"
info Disk size with unique dependencies: "92KB"
info Disk size with transitive dependencies: "92KB"
info Number of shared dependencies: 0

@jaredperreault-okta jaredperreault-okta changed the base branch from master to 7.1 June 17, 2024 14:08
@oktapp-aperture-okta oktapp-aperture-okta bot merged commit fc90ccf into 7.1 Jun 17, 2024
1 check passed
@oktapp-aperture-okta oktapp-aperture-okta bot deleted the jp-OKTA-731002 branch June 17, 2024 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants