Skip to content

Commit 56cf699

Browse files
antonisclaude
andauthored
build(deps): Bump body-parser to 2.4.0 to resolve DoS advisory (#6948)
Refresh yarn.lock to move body-parser onto the patched release: - body-parser: 2.3.0 -> 2.4.0 (DoS via trailing bytes after a compressed request body) [#714] Transitive dev/CI-tooling dependency (Appium + React Native CLI dev-server); not shipped in @sentry/react-native. Lockfile-only; stays within the existing ^2.3.0 range. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
1 parent 62a7ddc commit 56cf699

1 file changed

Lines changed: 22 additions & 6 deletions

File tree

‎yarn.lock‎

Lines changed: 22 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -10526,19 +10526,19 @@ __metadata:
1052610526
linkType: hard
1052710527

1052810528
"body-parser@npm:^2.3.0":
10529-
version: 2.3.0
10530-
resolution: "body-parser@npm:2.3.0"
10529+
version: 2.4.0
10530+
resolution: "body-parser@npm:2.4.0"
1053110531
dependencies:
1053210532
bytes: "npm:^3.1.2"
10533-
content-type: "npm:^2.0.0"
10533+
content-type: "npm:^2.1.0"
1053410534
debug: "npm:^4.4.3"
1053510535
http-errors: "npm:^2.0.1"
10536-
iconv-lite: "npm:^0.7.2"
10536+
iconv-lite: "npm:^0.7.3"
1053710537
on-finished: "npm:^2.4.1"
10538-
qs: "npm:^6.15.2"
10538+
qs: "npm:^6.16.1"
1053910539
raw-body: "npm:^3.0.2"
1054010540
type-is: "npm:^2.1.0"
10541-
checksum: 10c0/2a8fbbdc471b588338555a3e1a597d1eb0ad0c21cf20fdc3bac5d3f8d9c3a4b19b4163575ab852a43a5dfc0df7770ced5284f979e561f1a24c2f851ce89e695a
10541+
checksum: 10c0/247b891a27f661410b149c8a4771d3a9a076c86f41fff033d87b8bc828198195bd03ba321e3a8993ac37abca5a7ffeb62c96ea41f7ad3f11c170b73de5c27afe
1054210542
languageName: node
1054310543
linkType: hard
1054410544

@@ -11663,6 +11663,13 @@ __metadata:
1166311663
languageName: node
1166411664
linkType: hard
1166511665

11666+
"content-type@npm:^2.1.0":
11667+
version: 2.1.0
11668+
resolution: "content-type@npm:2.1.0"
11669+
checksum: 10c0/f5d420f55fd0c7a7f7cbae9637777ce67a074aa79b489d8d9fee8599089592b5f8bb194e1d6885741fee20271034baca0d68d5419535b52d070c4f7e39f4b448
11670+
languageName: node
11671+
linkType: hard
11672+
1166611673
"conventional-changelog-angular@npm:7.0.0":
1166711674
version: 7.0.0
1166811675
resolution: "conventional-changelog-angular@npm:7.0.0"
@@ -15777,6 +15784,15 @@ __metadata:
1577715784
languageName: node
1577815785
linkType: hard
1577915786

15787+
"iconv-lite@npm:^0.7.3":
15788+
version: 0.7.3
15789+
resolution: "iconv-lite@npm:0.7.3"
15790+
dependencies:
15791+
safer-buffer: "npm:>= 2.1.2 < 3.0.0"
15792+
checksum: 10c0/be2fd2414f7e94be3a63063fa0ad5919c16bc7b6e00c77eea0765ced6db405739f38dd51016583058fba25cc1d0106ba30b83fbb7a7e32f824d4db76f23d8d33
15793+
languageName: node
15794+
linkType: hard
15795+
1578015796
"ieee754@npm:1.2.1, ieee754@npm:^1.1.13, ieee754@npm:^1.2.1":
1578115797
version: 1.2.1
1578215798
resolution: "ieee754@npm:1.2.1"

0 commit comments

Comments
 (0)