ajv-merge-patch icon indicating copy to clipboard operation
ajv-merge-patch copied to clipboard

Potential security issue caused by `fast-json-patch`

Open willdurand opened this issue 2 years ago • 5 comments

See: https://github.com/advisories/GHSA-8gh8-hqwg-xf34

@epoberezkin would it be possible to upgrade fast-json-patch to 3.1.1 by chance?

willdurand avatar Jan 02 '23 14:01 willdurand

@epoberezkin , please take a look and let us know.

yaverin avatar Jan 16 '23 16:01 yaverin

@epoberezkin please approve the related PR for this issue.

krcummings1 avatar Mar 16 '23 18:03 krcummings1

Hey coming across this issue also, any update - seems to have sat for a few weeks. :)

Scott-Allen-Mind-Gyn avatar Mar 28 '23 09:03 Scott-Allen-Mind-Gyn

Any update on this?

matei4adrian avatar Aug 02 '23 13:08 matei4adrian

It's been 5 months since the last comment here and over a year since this was opened. Any maintainer updates?

ZackPoormanCalder avatar Jan 18 '24 14:01 ZackPoormanCalder