vynte-infra/twenty
2
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix: cipher-base is missing type checks, leading to hash rewind and passing on crafted data (#15299)

Browse Source 
Fixes [Dependabot Alert
263](https://github.com/twentyhq/twenty/security/dependabot/263) -
cipher-base is missing type checks, leading to hash rewind and passing
on crafted data.

Used `yarn up cipher-base --recursive` to bump up the patch version used
by parent dependencies.
This commit is contained in:
Abdullah.
2025-10-23 17:10:37 +02:00
committed by GitHub
parent 5b0344b502
commit eb2fd7c383
1 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
yarn.lock
+7 -6
View File
@@ -27827,12 +27827,13 @@ __metadata:
linkType: hard
"cipher-base@npm:^1.0.0, cipher-base@npm:^1.0.1, cipher-base@npm:^1.0.3":
version: 1.0.4
resolution: "cipher-base@npm:1.0.4"
version: 1.0.7
resolution: "cipher-base@npm:1.0.7"
dependencies:
inherits: "npm:^2.0.1"
safe-buffer: "npm:^5.0.1"
checksum: 10c0/d8d005f8b64d8a77b3d3ce531301ae7b45902c9cab4ec8b66bdbd2bf2a1d9fceb9a2133c293eb3c060b2d964da0f14c47fb740366081338aa3795dd1faa8984b
inherits: "npm:^2.0.4"
safe-buffer: "npm:^5.2.1"
to-buffer: "npm:^1.2.2"
checksum: 10c0/53c5046a9d9b60c586479b8f13fde263c3f905e13f11e8e04c7a311ce399c91d9c3ec96642332e0de077d356e1014ee12bba96f74fbaad0de750f49122258836
languageName: node
linkType: hard
@@ -51024,7 +51025,7 @@ __metadata:
languageName: node
linkType: hard
"to-buffer@npm:^1.2.0, to-buffer@npm:^1.2.1":
"to-buffer@npm:^1.2.0, to-buffer@npm:^1.2.1, to-buffer@npm:^1.2.2":
version: 1.2.2
resolution: "to-buffer@npm:1.2.2"
dependencies: