diff --git a/CHANGELOG.md b/CHANGELOG.md index 21180f3..c57e3be 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [1.5.5] - 2023-10-20 +### Fixed: +- Updated crypto.js dependency to fix security vulnerabilities [CVE-2023-46233] +- Updated react-dev-tools dependency to fix security vulnerabilities [CVE-2023-5654] +- Update urllib3 dependency to v1.26.18 + ## [1.5.4] - 2023-10-20 ### Fixed: - Fixing Security Vulnerabilities diff --git a/source/api/requirements.txt b/source/api/requirements.txt index 9534b1c..c906dcd 100644 --- a/source/api/requirements.txt +++ b/source/api/requirements.txt @@ -1,3 +1,3 @@ pyyaml requests_toolbelt -urllib3<2 \ No newline at end of file +urllib3 >= 1.26.18, < 2 \ No newline at end of file diff --git a/source/web/package-lock.json b/source/web/package-lock.json index 7f94491..72346dc 100644 --- a/source/web/package-lock.json +++ b/source/web/package-lock.json @@ -12670,9 +12670,9 @@ } }, "node_modules/crypto-js": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.1.1.tgz", - "integrity": "sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw==" + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz", + "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==" }, "node_modules/css-declaration-sorter": { "version": "6.3.1", @@ -20743,9 +20743,9 @@ } }, "node_modules/react-devtools-core": { - "version": "4.27.2", - "resolved": "https://registry.npmjs.org/react-devtools-core/-/react-devtools-core-4.27.2.tgz", - "integrity": "sha512-8SzmIkpO87alD7Xr6gWIEa1jHkMjawOZ+6egjazlnjB4UUcbnzGDf/vBJ4BzGuWWEM+pzrxuzsPpcMqlQkYK2g==", + "version": "4.28.5", + "resolved": "https://registry.npmjs.org/react-devtools-core/-/react-devtools-core-4.28.5.tgz", + "integrity": "sha512-cq/o30z9W2Wb4rzBefjv5fBalHU0rJGZCHAkf/RHSBWSSYwh8PlQTqqOJmgIIbBtpj27T6FIPXeomIjZtCNVqA==", "peer": true, "dependencies": { "shell-quote": "^1.6.1",