This is an automated email from the ASF dual-hosted git repository.
tiagobento pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie-tools.git
The following commit(s) were added to refs/heads/main by this push:
new 27422a2e209 NO-ISSUE: upgrade body-parser to version 1.20.3 (fixes
CVE-2024-45590) (#2579)
27422a2e209 is described below
commit 27422a2e2094ac122e028a57677a632fc44f186a
Author: Roberto Oliveira <[email protected]>
AuthorDate: Thu Sep 12 15:39:47 2024 -0400
NO-ISSUE: upgrade body-parser to version 1.20.3 (fixes CVE-2024-45590)
(#2579)
---
.../package.json | 2 +-
.../package.json | 2 +-
packages/sonataflow-dev-app/package.json | 2 +-
pnpm-lock.yaml | 134 +++++++++++++--------
4 files changed, 90 insertions(+), 50 deletions(-)
diff --git a/packages/runtime-tools-management-console-webapp/package.json
b/packages/runtime-tools-management-console-webapp/package.json
index 4817ede1d8f..2baaab4d7e4 100644
--- a/packages/runtime-tools-management-console-webapp/package.json
+++ b/packages/runtime-tools-management-console-webapp/package.json
@@ -65,7 +65,7 @@
"@types/react-router": "^5.1.20",
"@types/react-router-dom": "^5.3.3",
"apollo-server-express": "^3.13.0",
- "body-parser": "^1.20.2",
+ "body-parser": "^1.20.3",
"concurrently": "^8.2.2",
"copy-webpack-plugin": "^11.0.0",
"core-js": "3.6.5",
diff --git a/packages/runtime-tools-process-dev-ui-webapp/package.json
b/packages/runtime-tools-process-dev-ui-webapp/package.json
index 711163015ef..d9e634d85ec 100644
--- a/packages/runtime-tools-process-dev-ui-webapp/package.json
+++ b/packages/runtime-tools-process-dev-ui-webapp/package.json
@@ -79,7 +79,7 @@
"@types/react-router-dom": "^5.3.3",
"@types/uuid": "^8.3.0",
"apollo-server-express": "^3.13.0",
- "body-parser": "^1.20.2",
+ "body-parser": "^1.20.3",
"concurrently": "^8.2.2",
"copy-webpack-plugin": "^11.0.0",
"core-js": "3.6.5",
diff --git a/packages/sonataflow-dev-app/package.json
b/packages/sonataflow-dev-app/package.json
index 6e385562abf..f4de2a3ad66 100644
--- a/packages/sonataflow-dev-app/package.json
+++ b/packages/sonataflow-dev-app/package.json
@@ -26,7 +26,7 @@
"@kie-tools/root-env": "workspace:*",
"apollo-server-express": "^3.13.0",
"babel-jest": "^25.5.1",
- "body-parser": "^1.20.2",
+ "body-parser": "^1.20.3",
"cors": "^2.8.5",
"express": "^4.19.2",
"express-rate-limit": "^7.4.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 25ecfa7ba99..c94f38a7726 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -7227,8 +7227,8 @@ importers:
specifier: ^3.13.0
version: 3.13.0([email protected])([email protected])([email protected])
body-parser:
- specifier: ^1.20.2
- version: 1.20.2
+ specifier: ^1.20.3
+ version: 1.20.3
concurrently:
specifier: ^8.2.2
version: 8.2.2
@@ -7492,8 +7492,8 @@ importers:
specifier: ^3.13.0
version: 3.13.0([email protected])([email protected])([email protected])
body-parser:
- specifier: ^1.20.2
- version: 1.20.2
+ specifier: ^1.20.3
+ version: 1.20.3
concurrently:
specifier: ^8.2.2
version: 8.2.2
@@ -10767,8 +10767,8 @@ importers:
specifier: ^25.5.1
version: 25.5.1(@babel/[email protected])
body-parser:
- specifier: ^1.20.2
- version: 1.20.2
+ specifier: ^1.20.3
+ version: 1.20.3
cors:
specifier: ^2.8.5
version: 2.8.5
@@ -20563,6 +20563,10 @@ packages:
resolution: {integrity:
sha512-ml9pReCu3M61kGlqoTm2umSXTlRTuGTx0bfYj+uIUKKYycG5NtSbeetV3faSU6R7ajOPw0g/J1PvK4qNy7s5bA==}
engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
+ [email protected]:
+ resolution: {integrity:
sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==}
+ engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
+
[email protected]:
resolution: {integrity:
sha512-a7tP5+0Mw3YlUJcGAKUqIBkYYGlYxk2fnCasq/FUph1hadxlTRjF+gAcZksxANnaMnALjxEddmSi/H3OR8ugcQ==}
@@ -26917,6 +26921,10 @@ packages:
resolution: {integrity:
sha512-tDNIz22aBzCDxLtVH++VnTfzxlfeK5CbqohpSqpJgj1Wg/cQbStNAz3NuqCs5vV+pjBsK4x4pN9HlVh7rcYRiA==}
engines: {node: '>=0.6'}
+ [email protected]:
+ resolution: {integrity:
sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==}
+ engines: {node: '>=0.6'}
+
[email protected]:
resolution: {integrity:
sha512-773xhDQnZBMFobEiztv8LIl70ch5MSF/jUQVlhwFyBILqq96anmoctVIYz+ZRp0qbCKATTn6ev02M3r7Ga5vqA==}
engines: {node: '>=0.4.x'}
@@ -28025,6 +28033,10 @@ packages:
[email protected]:
resolution: {integrity:
sha512-q5XPytqFEIKHkGdiMIrY10mvLRvnQh42/+GoBlFW3b2LXLE2xxJpZFdm94we0BaoV3RwJyGqg5wS7epxTv0Zvw==}
+ [email protected]:
+ resolution: {integrity:
sha512-fDW/EZ6Q9RiO8eFG8Hj+7u/oW+XrPTIChwCOM2+th2A6OblDtYYIpve9m+KvI9Z4C9qSEXlaGR6bTEYHReuglA==}
+ engines: {node: '>= 0.4'}
+
[email protected]:
resolution: {integrity:
sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
@@ -31197,7 +31209,7 @@ snapshots:
'@babel/core': 7.16.12
'@babel/helper-compilation-targets': 7.23.6
'@babel/helper-plugin-utils': 7.22.5
- debug: 4.3.5
+ debug: 4.3.6
lodash.debounce: 4.0.8
resolve: 1.22.8
semver: 6.3.1
@@ -31209,7 +31221,7 @@ snapshots:
'@babel/core': 7.18.10
'@babel/helper-compilation-targets': 7.23.6
'@babel/helper-plugin-utils': 7.22.5
- debug: 4.3.5
+ debug: 4.3.6
lodash.debounce: 4.0.8
resolve: 1.22.8
semver: 6.3.1
@@ -31221,7 +31233,7 @@ snapshots:
'@babel/core': 7.24.9
'@babel/helper-compilation-targets': 7.23.6
'@babel/helper-plugin-utils': 7.22.5
- debug: 4.3.5
+ debug: 4.3.6
lodash.debounce: 4.0.8
resolve: 1.22.8
semver: 6.3.1
@@ -31233,7 +31245,7 @@ snapshots:
'@babel/core': 7.23.0
'@babel/helper-compilation-targets': 7.23.6
'@babel/helper-plugin-utils': 7.22.5
- debug: 4.3.5
+ debug: 4.3.6
lodash.debounce: 4.0.8
resolve: 1.22.8
transitivePeerDependencies:
@@ -31244,7 +31256,7 @@ snapshots:
'@babel/core': 7.23.0
'@babel/helper-compilation-targets': 7.23.6
'@babel/helper-plugin-utils': 7.22.5
- debug: 4.3.5
+ debug: 4.3.6
lodash.debounce: 4.0.8
resolve: 1.22.8
transitivePeerDependencies:
@@ -31255,7 +31267,7 @@ snapshots:
'@babel/core': 7.23.9
'@babel/helper-compilation-targets': 7.23.6
'@babel/helper-plugin-utils': 7.22.5
- debug: 4.3.5
+ debug: 4.3.6
lodash.debounce: 4.0.8
resolve: 1.22.8
transitivePeerDependencies:
@@ -36749,7 +36761,7 @@ snapshots:
'@babel/parser': 7.25.3
'@babel/template': 7.25.0
'@babel/types': 7.25.2
- debug: 4.3.5
+ debug: 4.3.6
globals: 11.12.0
transitivePeerDependencies:
- supports-color
@@ -37045,7 +37057,7 @@ snapshots:
'@eslint/[email protected]':
dependencies:
ajv: 6.12.6
- debug: 4.3.5
+ debug: 4.3.6
espree: 9.6.1
globals: 13.20.0
ignore: 5.2.0
@@ -37464,7 +37476,7 @@ snapshots:
'@types/json-stable-stringify': 1.0.34
'@whatwg-node/fetch': 0.8.8
chalk: 4.1.2
- debug: 4.3.5
+ debug: 4.3.6
dotenv: 16.3.1
graphql: 14.3.1
graphql-request: 6.1.0([email protected])([email protected])
@@ -37570,7 +37582,7 @@ snapshots:
'@humanwhocodes/[email protected]':
dependencies:
'@humanwhocodes/object-schema': 2.0.1
- debug: 4.3.5
+ debug: 4.3.6
minimatch: 3.1.2
transitivePeerDependencies:
- supports-color
@@ -41632,7 +41644,7 @@ snapshots:
'@storybook/[email protected]([email protected])([email protected](@swc/[email protected])([email protected])([email protected]))':
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
endent: 2.1.0
find-cache-dir: 3.3.1
flat-cache: 3.0.4
@@ -41646,7 +41658,7 @@ snapshots:
'@storybook/[email protected]([email protected])([email protected]([email protected]))':
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
endent: 2.1.0
find-cache-dir: 3.3.1
flat-cache: 3.0.4
@@ -41660,7 +41672,7 @@ snapshots:
'@storybook/[email protected]([email protected])([email protected]([email protected]))':
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
endent: 2.1.0
find-cache-dir: 3.3.1
flat-cache: 3.0.4
@@ -43022,7 +43034,7 @@ snapshots:
dependencies:
'@typescript-eslint/typescript-estree': 5.62.0([email protected])
'@typescript-eslint/utils': 5.62.0([email protected])([email protected])
- debug: 4.3.5
+ debug: 4.3.6
eslint: 8.52.0
tsutils: 3.21.0([email protected])
optionalDependencies:
@@ -43036,7 +43048,7 @@ snapshots:
dependencies:
'@typescript-eslint/types': 5.62.0
'@typescript-eslint/visitor-keys': 5.62.0
- debug: 4.3.5
+ debug: 4.3.6
globby: 11.1.0
is-glob: 4.0.3
semver: 7.5.4
@@ -43699,13 +43711,13 @@ snapshots:
[email protected]:
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
[email protected]:
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
@@ -43978,7 +43990,7 @@ snapshots:
accepts: 1.3.8
apollo-server-core: 3.13.0([email protected])([email protected])
apollo-server-types: 3.8.0([email protected])([email protected])
- body-parser: 1.20.2
+ body-parser: 1.20.3
cors: 2.8.5
express: 4.19.2
graphql: 14.3.1
@@ -45031,6 +45043,23 @@ snapshots:
transitivePeerDependencies:
- supports-color
+ [email protected]:
+ dependencies:
+ bytes: 3.1.2
+ content-type: 1.0.5
+ debug: 2.6.9
+ depd: 2.0.0
+ destroy: 1.2.0
+ http-errors: 2.0.0
+ iconv-lite: 0.4.24
+ on-finished: 2.4.1
+ qs: 6.13.0
+ raw-body: 2.5.2
+ type-is: 1.6.18
+ unpipe: 1.0.0
+ transitivePeerDependencies:
+ - supports-color
+
[email protected]: {}
[email protected]:
@@ -47056,7 +47085,7 @@ snapshots:
[email protected]:
dependencies:
address: 1.2.2
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
@@ -47296,7 +47325,7 @@ snapshots:
base64id: 2.0.0
cookie: 0.4.1
cors: 2.8.5
- debug: 4.3.5
+ debug: 4.3.6
engine.io-parser: 5.0.3
ws: 8.2.3
transitivePeerDependencies:
@@ -47644,7 +47673,7 @@ snapshots:
[email protected]([email protected]):
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
esbuild: 0.18.20
transitivePeerDependencies:
- supports-color
@@ -48123,7 +48152,7 @@ snapshots:
[email protected]:
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
get-stream: 5.2.0
yauzl: 2.10.0
optionalDependencies:
@@ -48133,7 +48162,7 @@ snapshots:
[email protected]([email protected]):
dependencies:
- debug: 4.3.5([email protected])
+ debug: 4.3.6([email protected])
get-stream: 5.2.0
yauzl: 2.10.0
optionalDependencies:
@@ -48558,7 +48587,7 @@ snapshots:
dependencies:
asynckit: 0.4.0
combined-stream: 1.0.8
- mime-types: 2.1.34
+ mime-types: 2.1.35
[email protected]:
dependencies:
@@ -49306,7 +49335,7 @@ snapshots:
dependencies:
'@tootallnate/once': 1.1.2
agent-base: 6.0.2
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
@@ -49321,7 +49350,7 @@ snapshots:
[email protected]:
dependencies:
agent-base: 7.1.0
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
@@ -49399,14 +49428,14 @@ snapshots:
[email protected]:
dependencies:
agent-base: 5.1.1
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
[email protected]:
dependencies:
agent-base: 6.0.2
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
@@ -49420,14 +49449,14 @@ snapshots:
[email protected]:
dependencies:
agent-base: 7.1.0
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
[email protected]:
dependencies:
agent-base: 7.1.0
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
@@ -49955,7 +49984,7 @@ snapshots:
[email protected]:
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
istanbul-lib-coverage: 3.2.0
source-map: 0.6.1
transitivePeerDependencies:
@@ -51330,7 +51359,7 @@ snapshots:
[email protected]:
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
http-errors: 1.8.1
resolve-path: 1.4.0
transitivePeerDependencies:
@@ -51627,7 +51656,7 @@ snapshots:
[email protected]:
dependencies:
date-format: 4.0.3
- debug: 4.3.5
+ debug: 4.3.6
flatted: 3.2.4
rfdc: 1.3.0
streamroller: 3.0.2
@@ -53625,7 +53654,7 @@ snapshots:
[email protected]:
dependencies:
'@types/mime-types': 2.1.2
- debug: 4.3.5
+ debug: 4.3.6
extract-zip: 1.7.0
https-proxy-agent: 4.0.0
mime: 2.6.0
@@ -53685,6 +53714,10 @@ snapshots:
dependencies:
side-channel: 1.0.4
+ [email protected]:
+ dependencies:
+ side-channel: 1.0.6
+
[email protected]: {}
[email protected]: {}
@@ -55096,6 +55129,13 @@ snapshots:
get-intrinsic: 1.2.4
object-inspect: 1.13.1
+ [email protected]:
+ dependencies:
+ call-bind: 1.0.7
+ es-errors: 1.3.0
+ get-intrinsic: 1.2.4
+ object-inspect: 1.13.1
+
[email protected]: {}
[email protected]: {}
@@ -55218,7 +55258,7 @@ snapshots:
dependencies:
'@types/component-emitter': 1.2.11
component-emitter: 1.3.0
- debug: 4.3.5
+ debug: 4.3.6
transitivePeerDependencies:
- supports-color
@@ -55226,7 +55266,7 @@ snapshots:
dependencies:
accepts: 1.3.8
base64id: 2.0.0
- debug: 4.3.5
+ debug: 4.3.6
engine.io: 6.1.2
socket.io-adapter: 2.3.3
socket.io-parser: 4.0.4
@@ -55336,7 +55376,7 @@ snapshots:
[email protected]:
dependencies:
- debug: 4.3.5
+ debug: 4.3.6
detect-node: 2.1.0
hpack.js: 2.1.6
obuf: 1.1.2
@@ -55507,7 +55547,7 @@ snapshots:
[email protected]:
dependencies:
date-format: 4.0.3
- debug: 4.3.5
+ debug: 4.3.6
fs-extra: 10.1.0
transitivePeerDependencies:
- supports-color
@@ -55709,7 +55749,7 @@ snapshots:
dependencies:
component-emitter: 1.3.0
cookiejar: 2.1.4
- debug: 4.3.5
+ debug: 4.3.6
fast-safe-stringify: 2.1.1
form-data: 4.0.0
formidable: 2.1.1
@@ -56637,7 +56677,7 @@ snapshots:
[email protected]:
dependencies:
'@tufjs/models': 2.0.1
- debug: 4.3.5
+ debug: 4.3.6
make-fetch-happen: 13.0.1
transitivePeerDependencies:
- supports-color
@@ -56676,7 +56716,7 @@ snapshots:
[email protected]:
dependencies:
media-typer: 0.3.0
- mime-types: 2.1.34
+ mime-types: 2.1.35
[email protected]:
dependencies:
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
