Skip to content

Potential security issue caused by fast-json-patch #54

Open

Description

@willdurand

See: GHSA-8gh8-hqwg-xf34

@epoberezkin would it be possible to upgrade fast-json-patch to 3.1.1 by chance?

Activity

  1. yaverin commented on Jan 16, 2023

    @yaverin

    @epoberezkin , please take a look and let us know.

  2. krcummings1 commented on Mar 16, 2023

    @krcummings1

    @epoberezkin please approve the related PR for this issue.

  3. Scott-Allen-Mind-Gyn commented on Mar 28, 2023

    @Scott-Allen-Mind-Gyn

    Hey coming across this issue also, any update - seems to have sat for a few weeks. :)

  4. matei4adrian commented on Aug 2, 2023

    @matei4adrian

    Any update on this?

  5. ZackPoormanCalder commented on Jan 18, 2024

    @ZackPoormanCalder

    It's been 5 months since the last comment here and over a year since this was opened. Any maintainer updates?

  6. awilczek commented on Jan 29, 2025

    @awilczek

    it would be really nice if this was finally fixed (even if this is not a real issue)
    we need to explain, during the security audits, why we have a CRITICAL in most of our apps third year in a row...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions