Commit 1e5eb3c
committed
🔧 fix: Upgrade Cookie to 0.7.x, fix CVE-2024-47764
Cookie `0.6.x` is vulnerable to an XSS vulnerability which has been
logged as CVE-2024-47764 at
https://www.cve.org/CVERecord?id=CVE-2024-47764. This commit upgrades
cookie to `^0.7.0` which includes the CVE fix. There is cookie `1.0.x`
available now but it includes breaking changes which should be done
separately.
There is no currently available upgrade to `@types/cookie` for `0.7.x`
but `0.6.x` is type compatible.1 parent 9007186 commit 1e5eb3c
2 files changed
+1
-1
lines changedBinary file not shown.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
104 | 104 | | |
105 | 105 | | |
106 | 106 | | |
107 | | - | |
| 107 | + | |
108 | 108 | | |
109 | 109 | | |
110 | 110 | | |
| |||
0 commit comments