Closed snyk-bot closed 1 week ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Prototype Pollution
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-FASTXMLPARSER-3325616
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: fast-xml-parser
The new version differs by 239 commits.- 2b032a4 Update package detail
- 7a7dbac update package for release
- b6ee2a5 update tests for #540
- 62f9e4b common logic to build text and obj node
- 83069d8 update package for release
- ed962e0 Merge branch 'dev'
- c959d13 update package detail
- 6ebcb14 make eNotation optional
- 30624d7 Fix '<' or '>' in DTD comment throwing an error. (#533)
- 40a2176 update package detail
- 45b01db add missed typing "eNotation"
- 25f5e8a Fix docs for unpairdTags example in XMLBuilder
- 007d638 update package for release
- 7ca95a2 comment unimplemented methods
- 59eb905 520 preserveorder formatting (#527)
- 08c59e2 remove space
- 6689ed2 docs: fix node project example (#522)
- 0d9d60d Fixed wrong usage in example (#518)
- a619c48 Add transformAttributeName to transform the attribute name upon parsing. Same logic as transformTagName (#519)
- f900ef8 Update README.md
- 9a8d0a7 Update README.md
- 1ff4e9a update package detail
- f719751 Update README
- f962cb5 fix: Builder tag/attributeValueProcessor types (#492)
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Prototype Pollution