botframework-components icon indicating copy to clipboard operation
botframework-components copied to clipboard

Published 20 hours ago • verified publisher icon microsoft

Upgrade fast-xml-parser dependency

Open ceciliaavila opened this issue 2 years ago • 0 comments

Describe the bug

To avoid security alert CVE-2023-34104, upgrade botbuilder packages to version 4.21.0 as it has the safe version of fast-xml-parser 4.24. Version 4.21 of botbuilder is still in preview. We are creating this issue to track the task and proceed with the update once the version is published as latest.

ceciliaavila avatar Aug 18 '23 14:08 ceciliaavila