Update next.js vuln

RetireJS · Oct 31, 2023 · 0a61d8b · 0a61d8b
1 parent 0fe12bb
commit 0a61d8b
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 1 deletion.
diff --git a/node/publish.sh b/node/publish.sh
@@ -35,7 +35,10 @@ then
     git tag $VERSION $COMMIT_ID -m "Release of version $VERSION"
     git push --tags
     echo "Done!"
-    gh release create "$VERSION" -F CHANGELOG.md
+    TMP_CL_FILE=changelog-tmp.md
+    awk '/^## / {p=1; ++count} count == 2 {exit} p' CHANGELOG.md > $TMP_CL_FILE
+    gh release create "$VERSION" -F $TMP_CL_FILE
+    rm $TMP_CL_FILE
 else
     echo "Aborting"
 fi
diff --git a/repository/jsrepository.json b/repository/jsrepository.json
@@ -4033,6 +4033,16 @@
   "nextjs": {
     "npmname": "next",
     "vulnerabilities": [
+      {
+        "below": "13.4.20-canary.13",
+        "cwe": ["CWE-525"],
+        "severity": "low",
+        "identifiers": {
+          "summary": "Next.js missing cache-control header may lead to CDN caching empty reply",
+          "CVE": ["CVE-2023-46298"],
+          "githubID": "GHSA-c59h-r6p8-q9wc"
+        }
+      },
       {
         "atOrAbove": "10.0.0",
         "below": "12.1.0",