fix: tmp allows arbitrary temporary file / directory write via symbolic link dir parameter (#15452)

Resolves [Dependabot Alert
255](https://github.com/twentyhq/twenty/security/dependabot/255) - fix:
tmp allows arbitrary temporary file / directory write via symbolic link
`dir` parameter.

Updated the dev-dependency `zapier-platform-cli` for it to depend on tmp
0.2.4 and also ran `yarn up tmp --recursive` to update the version of
tmp elsewhere.

Not expecting any breaking changes to twenty-zapier since
`zapier-platform-cli` is marked as a development dependency.

Co-authored-by: martmull <martmull@hotmail.fr>
This commit is contained in:
Abdullah.
2025-11-03 14:17:08 +05:00
committed by GitHub
parent 7c854ba816
commit e462f191d0
2 changed files with 8480 additions and 11273 deletions
+1 -1
View File
@@ -22,7 +22,7 @@
"devDependencies": {
"jest": "29.7.0",
"rimraf": "^3.0.2",
"zapier-platform-cli": "^15.4.1"
"zapier-platform-cli": "^17.9.1"
},
"installConfig": {
"hoistingLimits": "dependencies"
+8479 -11272
View File
File diff suppressed because it is too large Load Diff