Closed gs-coa closed 3 months ago
Fix fast-xml-parser vulnerable to ReDOS at currency parsing.
@datadog/datadog-ci requires fast-xml-parser via a transitive dependency on @aws-sdk/core
Release notes: https://github.com/aws/aws-sdk-js-v3/releases/tag/v3.621.0
Version bump
Hi! Thanks for the contribution, but I'm closing in favor of https://github.com/DataDog/datadog-ci/pull/1416 because we like to keep all aws-sdk packages' versions in sync.
What and why?
Fix fast-xml-parser vulnerable to ReDOS at currency parsing.
@datadog/datadog-ci requires fast-xml-parser via a transitive dependency on @aws-sdk/core
Release notes: https://github.com/aws/aws-sdk-js-v3/releases/tag/v3.621.0
How?
Version bump
Review checklist