vynte-infra/twenty
2
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix: linkify allows prototype pollution & HTML attribute injection (XSS) (#15291)

Browse Source 
Fixes [Dependabot Alert
251](https://github.com/twentyhq/twenty/security/dependabot/251) -
linkify allows prototype pollution & HTML attribute injection (XSS).

Used `yarn up linkifyjs --recursive` to bring the version up to 4.3.2 in
yarn.lock.
This commit is contained in:
Abdullah.
2025-10-23 17:10:20 +02:00
committed by GitHub
parent 8341a76bea
commit 5b0344b502
1 changed files with 1 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
yarn.lock
+1 -8
View File
@@ -39409,14 +39409,7 @@ __metadata:
languageName: node
linkType: hard
"linkifyjs@npm:^4.2.0":
version: 4.3.1
resolution: "linkifyjs@npm:4.3.1"
checksum: 10c0/fcd7d36ce1b03adb19dcc84b3b375f0b9d6e88d8885461bc69e5d5cbf1cd666cd740e175f015ac5ce600154a4f2bc68f4aed3920b1254aa4c6e9b42f49b3de79
languageName: node
linkType: hard
"linkifyjs@npm:^4.3.2":
"linkifyjs@npm:^4.2.0, linkifyjs@npm:^4.3.2":
version: 4.3.2
resolution: "linkifyjs@npm:4.3.2"
checksum: 10c0/1a85e6b368304a4417567fe5e38651681e3e82465590836942d1b4f3c834cc35532898eb1e2479f6337d9144b297d418eb708b6be8ed0b3dc3954a3588e07971