Security advisory: fast-xml-parser

RyanHirsch / partytime

9 stars 5 forks source link

Security advisory: fast-xml-parser #36

Open curthipster opened 1 year ago

curthipster commented 1 year ago

There are two security advisories for fast-xml-parser:

https://github.com/advisories/GHSA-6w63-h3fj-q4vw
https://github.com/advisories/GHSA-x3cc-x39p-42qx

Both can be addressed by upgrading to 4.1.2.

curthipster commented 1 year ago

It's a major upgrade, and it's not immediately obvious to me from the release notes if there are breaking changes. They don't label them as such, but there are a number of notes about renaming things and there is a different version of their documentation on their home page, so my guess is that there are.