fix: tmp allows arbitrary temporary file / directory write via symbolic link dir parameter (#15452)
Resolves [Dependabot Alert 255](https://github.com/twentyhq/twenty/security/dependabot/255) - fix: tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter. Updated the dev-dependency `zapier-platform-cli` for it to depend on tmp 0.2.4 and also ran `yarn up tmp --recursive` to update the version of tmp elsewhere. Not expecting any breaking changes to twenty-zapier since `zapier-platform-cli` is marked as a development dependency. Co-authored-by: martmull <martmull@hotmail.fr>
This commit is contained in:
@@ -22,7 +22,7 @@
|
||||
"devDependencies": {
|
||||
"jest": "29.7.0",
|
||||
"rimraf": "^3.0.2",
|
||||
"zapier-platform-cli": "^15.4.1"
|
||||
"zapier-platform-cli": "^17.9.1"
|
||||
},
|
||||
"installConfig": {
|
||||
"hoistingLimits": "dependencies"
|
||||
|
||||
Reference in New Issue
Block a user