From c3c20eb52b6fb1b1f93da758e0a7705393d36404 Mon Sep 17 00:00:00 2001 From: anupamme Date: Tue, 1 Sep 2026 13:39:50 +0000 Subject: [PATCH] fix: CVE-2024-21534 security vulnerability Automated dependency upgrade by OrbisAI Security --- .../package-lock.json | 79 +++++++++-- src/openapi-examples-validator/package.json | 124 +++++++++--------- 2 files changed, 133 insertions(+), 70 deletions(-) diff --git a/src/openapi-examples-validator/package-lock.json b/src/openapi-examples-validator/package-lock.json index 5686783..6e931b0 100644 --- a/src/openapi-examples-validator/package-lock.json +++ b/src/openapi-examples-validator/package-lock.json @@ -17,7 +17,7 @@ "glob": "^7.2.0", "json-pointer": "0.6.1", "json-schema-ref-parser": "^9.0.9", - "jsonpath-plus": "^6.0.1", + "jsonpath-plus": "^10.3.0", "lodash.clonedeep": "^4.5.0", "lodash.flatmap": "^4.5.0", "lodash.flatten": "^4.4.0", @@ -2111,6 +2111,30 @@ "resolved": "https://registry.npmjs.org/@jsdevtools/ono/-/ono-7.1.3.tgz", "integrity": "sha512-4JQNk+3mVzK3xh2rqd6RB4J46qUR19azEHBneZyTZM+c456qOrbbM/5xcR8huNCCcbVt7+UmizG6GuUvPvKUYg==" }, + "node_modules/@jsep-plugin/assignment": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/@jsep-plugin/assignment/-/assignment-1.3.0.tgz", + "integrity": "sha512-VVgV+CXrhbMI3aSusQyclHkenWSAm95WaiKrMxRFam3JSUiIaQjoMIw2sEs/OX4XifnqeQUN4DYbJjlA8EfktQ==", + "license": "MIT", + "engines": { + "node": ">= 10.16.0" + }, + "peerDependencies": { + "jsep": "^0.4.0||^1.0.0" + } + }, + "node_modules/@jsep-plugin/regex": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/@jsep-plugin/regex/-/regex-1.0.4.tgz", + "integrity": "sha512-q7qL4Mgjs1vByCaTnDFcBnV9HS7GVPJX5vyVoCgZHNSC9rjwIlmbXG5sUuorR5ndfHAIlJ8pVStxvjXHbNvtUg==", + "license": "MIT", + "engines": { + "node": ">= 10.16.0" + }, + "peerDependencies": { + "jsep": "^0.4.0||^1.0.0" + } + }, "node_modules/@nicolo-ribaudo/chokidar-2": { "version": "2.1.8-no-fsevents.3", "resolved": "https://registry.npmjs.org/@nicolo-ribaudo/chokidar-2/-/chokidar-2-2.1.8-no-fsevents.3.tgz", @@ -6447,6 +6471,15 @@ "integrity": "sha512-UVU9dibq2JcFWxQPA6KCqj5O42VOmAY3zQUfEKxU0KpTGXwNoCjkX1e13eHNvw/xPynt6pU0rZ1htjWTNTSXsg==", "dev": true }, + "node_modules/jsep": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/jsep/-/jsep-1.4.0.tgz", + "integrity": "sha512-B7qPcEVE3NVkmSJbaYxvv4cHkVW7DQsZz13pUMrfS8z8Q/BuShN+gcTXrUlPiGqM2/t/EEaI030bpxMqY8gMlw==", + "license": "MIT", + "engines": { + "node": ">= 10.16.0" + } + }, "node_modules/jsesc": { "version": "2.5.2", "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz", @@ -6550,11 +6583,21 @@ ] }, "node_modules/jsonpath-plus": { - "version": "6.0.1", - "resolved": "https://registry.npmjs.org/jsonpath-plus/-/jsonpath-plus-6.0.1.tgz", - "integrity": "sha512-EvGovdvau6FyLexFH2OeXfIITlgIbgZoAZe3usiySeaIDm5QS+A10DKNpaPBBqqRSZr2HN6HVNXxtwUAr2apEw==", + "version": "10.3.0", + "resolved": "https://registry.npmjs.org/jsonpath-plus/-/jsonpath-plus-10.3.0.tgz", + "integrity": "sha512-8TNmfeTCk2Le33A3vRRwtuworG/L5RrgMvdjhKZxvyShO+mBu2fP50OWUjRLNtvw344DdDarFh9buFAZs5ujeA==", + "license": "MIT", + "dependencies": { + "@jsep-plugin/assignment": "^1.3.0", + "@jsep-plugin/regex": "^1.0.4", + "jsep": "^1.4.0" + }, + "bin": { + "jsonpath": "bin/jsonpath-cli.js", + "jsonpath-plus": "bin/jsonpath-cli.js" + }, "engines": { - "node": ">=10.0.0" + "node": ">=18.0.0" } }, "node_modules/JSONStream": { @@ -12044,6 +12087,16 @@ "resolved": "https://registry.npmjs.org/@jsdevtools/ono/-/ono-7.1.3.tgz", "integrity": "sha512-4JQNk+3mVzK3xh2rqd6RB4J46qUR19azEHBneZyTZM+c456qOrbbM/5xcR8huNCCcbVt7+UmizG6GuUvPvKUYg==" }, + "@jsep-plugin/assignment": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/@jsep-plugin/assignment/-/assignment-1.3.0.tgz", + "integrity": "sha512-VVgV+CXrhbMI3aSusQyclHkenWSAm95WaiKrMxRFam3JSUiIaQjoMIw2sEs/OX4XifnqeQUN4DYbJjlA8EfktQ==" + }, + "@jsep-plugin/regex": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/@jsep-plugin/regex/-/regex-1.0.4.tgz", + "integrity": "sha512-q7qL4Mgjs1vByCaTnDFcBnV9HS7GVPJX5vyVoCgZHNSC9rjwIlmbXG5sUuorR5ndfHAIlJ8pVStxvjXHbNvtUg==" + }, "@nicolo-ribaudo/chokidar-2": { "version": "2.1.8-no-fsevents.3", "resolved": "https://registry.npmjs.org/@nicolo-ribaudo/chokidar-2/-/chokidar-2-2.1.8-no-fsevents.3.tgz", @@ -15306,6 +15359,11 @@ "integrity": "sha512-UVU9dibq2JcFWxQPA6KCqj5O42VOmAY3zQUfEKxU0KpTGXwNoCjkX1e13eHNvw/xPynt6pU0rZ1htjWTNTSXsg==", "dev": true }, + "jsep": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/jsep/-/jsep-1.4.0.tgz", + "integrity": "sha512-B7qPcEVE3NVkmSJbaYxvv4cHkVW7DQsZz13pUMrfS8z8Q/BuShN+gcTXrUlPiGqM2/t/EEaI030bpxMqY8gMlw==" + }, "jsesc": { "version": "2.5.2", "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz", @@ -15391,9 +15449,14 @@ "dev": true }, "jsonpath-plus": { - "version": "6.0.1", - "resolved": "https://registry.npmjs.org/jsonpath-plus/-/jsonpath-plus-6.0.1.tgz", - "integrity": "sha512-EvGovdvau6FyLexFH2OeXfIITlgIbgZoAZe3usiySeaIDm5QS+A10DKNpaPBBqqRSZr2HN6HVNXxtwUAr2apEw==" + "version": "10.3.0", + "resolved": "https://registry.npmjs.org/jsonpath-plus/-/jsonpath-plus-10.3.0.tgz", + "integrity": "sha512-8TNmfeTCk2Le33A3vRRwtuworG/L5RrgMvdjhKZxvyShO+mBu2fP50OWUjRLNtvw344DdDarFh9buFAZs5ujeA==", + "requires": { + "@jsep-plugin/assignment": "^1.3.0", + "@jsep-plugin/regex": "^1.0.4", + "jsep": "^1.4.0" + } }, "JSONStream": { "version": "1.3.5", diff --git a/src/openapi-examples-validator/package.json b/src/openapi-examples-validator/package.json index 3713911..1b5a216 100644 --- a/src/openapi-examples-validator/package.json +++ b/src/openapi-examples-validator/package.json @@ -4,85 +4,85 @@ "description": "Validates embedded examples in OpenAPI-JSONs", "main": "dist/index.js", "engines": { - "node": ">=8" + "node": ">=8" }, "bin": { - "openapi-examples-validator": "dist/cli.js" + "openapi-examples-validator": "dist/cli.js" }, "standard-version": { - "scripts": { - "postchangelog": "npm run release:create-dockerfile && npm run release:stage-artifacts" - } + "scripts": { + "postchangelog": "npm run release:create-dockerfile && npm run release:stage-artifacts" + } }, "scripts": { - "start-dev": "babel-node src/cli", - "build": "npm run build:clean && npm run build:webpack", - "build:clean": "rimraf dist", - "build:webpack": "webpack --bail --progress --profile --mode production --config ./webpack/config.babel.js", - "coverage": "rimraf ./coverage && nyc --reporter=lcov --reporter=text -x \"dist/**/*\" -x \"test/**/*.js\" npm test", - "coveralls": "cat ./coverage/lcov.info | coveralls", - "test": "npm run build && npm run test:mocha", - "test-mutations": "stryker run", - "test:mocha": "mocha --require \"./test/util/setup-tests\" --recursive \"./test/specs/**/*.js\"", - "release": "npm run build && standard-version -a", - "release:create-dockerfile": "npm run build && node etc/src/build-dockerfile.js", - "release:stage-artifacts": "git add dist/*" + "start-dev": "babel-node src/cli", + "build": "npm run build:clean && npm run build:webpack", + "build:clean": "rimraf dist", + "build:webpack": "webpack --bail --progress --profile --mode production --config ./webpack/config.babel.js", + "coverage": "rimraf ./coverage && nyc --reporter=lcov --reporter=text -x \"dist/**/*\" -x \"test/**/*.js\" npm test", + "coveralls": "cat ./coverage/lcov.info | coveralls", + "test": "npm run build && npm run test:mocha", + "test-mutations": "stryker run", + "test:mocha": "mocha --require \"./test/util/setup-tests\" --recursive \"./test/specs/**/*.js\"", + "release": "npm run build && standard-version -a", + "release:create-dockerfile": "npm run build && node etc/src/build-dockerfile.js", + "release:stage-artifacts": "git add dist/*" }, "repository": { - "type": "git", - "url": "git+https://github.com/codekie/openapi-examples-validator.git" + "type": "git", + "url": "git+https://github.com/codekie/openapi-examples-validator.git" }, "keywords": [ - "swagger", - "openapi", - "json", - "validate", - "examples" + "swagger", + "openapi", + "json", + "validate", + "examples" ], "author": "Josua Amann", "license": "MIT", "bugs": { - "url": "https://github.com/codekie/openapi-examples-validator/issues" + "url": "https://github.com/codekie/openapi-examples-validator/issues" }, "homepage": "https://github.com/codekie/openapi-examples-validator#readme", "devDependencies": { - "@babel/cli": "^7.16.0", - "@babel/core": "^7.16.0", - "@babel/node": "^7.16.0", - "@babel/preset-env": "^7.16.0", - "@babel/register": "^7.16.0", - "@stryker-mutator/core": "^4.5.0", - "@stryker-mutator/mocha-runner": "^4.5.0", - "babel-eslint": "^10.1.0", - "babel-loader": "^8.2.3", - "chai": "^4.3.4", - "coveralls": "^3.1.1", - "eslint": "^7.27.0", - "eslint-loader": "^4.0.2", - "json-loader": "^0.5.7", - "mocha": "^8.4.0", - "mocha-lcov-reporter": "^1.3.0", - "nyc": "^15.1.0", - "rimraf": "^3.0.2", - "standard-version": "^9.3.2", - "stryker-cli": "^1.0.2", - "webpack": "^5.61.0", - "webpack-cli": "^4.9.1" + "@babel/cli": "^7.16.0", + "@babel/core": "^7.16.0", + "@babel/node": "^7.16.0", + "@babel/preset-env": "^7.16.0", + "@babel/register": "^7.16.0", + "@stryker-mutator/core": "^4.5.0", + "@stryker-mutator/mocha-runner": "^4.5.0", + "babel-eslint": "^10.1.0", + "babel-loader": "^8.2.3", + "chai": "^4.3.4", + "coveralls": "^3.1.1", + "eslint": "^7.27.0", + "eslint-loader": "^4.0.2", + "json-loader": "^0.5.7", + "mocha": "^8.4.0", + "mocha-lcov-reporter": "^1.3.0", + "nyc": "^15.1.0", + "rimraf": "^3.0.2", + "standard-version": "^9.3.2", + "stryker-cli": "^1.0.2", + "webpack": "^5.61.0", + "webpack-cli": "^4.9.1" }, "dependencies": { - "ajv": "^8.8.2", - "ajv-draft-04": "^1.0.0", - "ajv-oai": "1.2.1", - "commander": "^6.2.1", - "errno": "^1.0.0", - "glob": "^7.2.0", - "json-pointer": "0.6.1", - "json-schema-ref-parser": "^9.0.9", - "jsonpath-plus": "^6.0.1", - "lodash.clonedeep": "^4.5.0", - "lodash.flatmap": "^4.5.0", - "lodash.flatten": "^4.4.0", - "lodash.merge": "^4.6.2", - "yaml": "^1.10.2" + "ajv": "^8.8.2", + "ajv-draft-04": "^1.0.0", + "ajv-oai": "1.2.1", + "commander": "^6.2.1", + "errno": "^1.0.0", + "glob": "^7.2.0", + "json-pointer": "0.6.1", + "json-schema-ref-parser": "^9.0.9", + "jsonpath-plus": "^10.3.0", + "lodash.clonedeep": "^4.5.0", + "lodash.flatmap": "^4.5.0", + "lodash.flatten": "^4.4.0", + "lodash.merge": "^4.6.2", + "yaml": "^1.10.2" } - } \ No newline at end of file +}