From b638348289b628c6d63cf1d9619822171546a6eb Mon Sep 17 00:00:00 2001 From: kamyarz-aws <120507168+kamyarz-aws@users.noreply.github.com> Date: Fri, 3 Nov 2023 11:04:42 -0400 Subject: [PATCH] Update to Version v1.5.5 (#204) --- CHANGELOG.md | 6 ++++++ source/api/requirements.txt | 2 +- source/web/package-lock.json | 12 ++++++------ 3 files changed, 13 insertions(+), 7 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 21180f3..c57e3be 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [1.5.5] - 2023-10-20 +### Fixed: +- Updated crypto.js dependency to fix security vulnerabilities [CVE-2023-46233] +- Updated react-dev-tools dependency to fix security vulnerabilities [CVE-2023-5654] +- Update urllib3 dependency to v1.26.18 + ## [1.5.4] - 2023-10-20 ### Fixed: - Fixing Security Vulnerabilities diff --git a/source/api/requirements.txt b/source/api/requirements.txt index 9534b1c..c906dcd 100644 --- a/source/api/requirements.txt +++ b/source/api/requirements.txt @@ -1,3 +1,3 @@ pyyaml requests_toolbelt -urllib3<2 \ No newline at end of file +urllib3 >= 1.26.18, < 2 \ No newline at end of file diff --git a/source/web/package-lock.json b/source/web/package-lock.json index 7f94491..72346dc 100644 --- a/source/web/package-lock.json +++ b/source/web/package-lock.json @@ -12670,9 +12670,9 @@ } }, "node_modules/crypto-js": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.1.1.tgz", - "integrity": "sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw==" + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz", + "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==" }, "node_modules/css-declaration-sorter": { "version": "6.3.1", @@ -20743,9 +20743,9 @@ } }, "node_modules/react-devtools-core": { - "version": "4.27.2", - "resolved": "https://registry.npmjs.org/react-devtools-core/-/react-devtools-core-4.27.2.tgz", - "integrity": "sha512-8SzmIkpO87alD7Xr6gWIEa1jHkMjawOZ+6egjazlnjB4UUcbnzGDf/vBJ4BzGuWWEM+pzrxuzsPpcMqlQkYK2g==", + "version": "4.28.5", + "resolved": "https://registry.npmjs.org/react-devtools-core/-/react-devtools-core-4.28.5.tgz", + "integrity": "sha512-cq/o30z9W2Wb4rzBefjv5fBalHU0rJGZCHAkf/RHSBWSSYwh8PlQTqqOJmgIIbBtpj27T6FIPXeomIjZtCNVqA==", "peer": true, "dependencies": { "shell-quote": "^1.6.1",