This is an automated email from the ASF dual-hosted git repository. jleroux pushed a commit to branch release22.01 in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release22.01 by this push: new 5983f647a2 Improved: Regular expression denial of service in jquery-validation (OFBIZ-12634) 5983f647a2 is described below commit 5983f647a235df54c84189fc71eabc18207e055d Author: Jacques Le Roux <jacques.le.r...@les7arts.com> AuthorDate: Fri Jun 17 17:47:44 2022 +0200 Improved: Regular expression denial of service in jquery-validation (OFBIZ-12634) Uses "gradlew npm_audit_fix" because backporting only this change was complicated --- themes/common-theme/webapp/common/js/package-lock.json | 6 +++--- themes/common-theme/webapp/common/js/package.json | 10 +++++----- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/themes/common-theme/webapp/common/js/package-lock.json b/themes/common-theme/webapp/common/js/package-lock.json index 2649b1d236..e323553c4b 100644 --- a/themes/common-theme/webapp/common/js/package-lock.json +++ b/themes/common-theme/webapp/common/js/package-lock.json @@ -32,9 +32,9 @@ } }, "jquery-validation": { - "version": "1.19.3", - "resolved": "https://registry.npmjs.org/jquery-validation/-/jquery-validation-1.19.3.tgz", - "integrity": "sha512-iXxCS5W7STthSTMFX/NDZfWHBLbJ1behVK3eAgHXAV8/0vRa9M4tiqHvJMr39VGWHMGdlkhrtrkBuaL2UlE8yw==" + "version": "1.19.4", + "resolved": "https://registry.npmjs.org/jquery-validation/-/jquery-validation-1.19.4.tgz", + "integrity": "sha512-PcwKcATCR+JL77m9kkWd84NAHAunJP9iasF6IbMxUgl73xDAimxjt5oYFmYHDXBmTZM4rpkXxMNR/jGI5TlSjA==" }, "jquery.browser": { "version": "0.1.0", diff --git a/themes/common-theme/webapp/common/js/package.json b/themes/common-theme/webapp/common/js/package.json index 792d5bf32c..cf2ce5faea 100644 --- a/themes/common-theme/webapp/common/js/package.json +++ b/themes/common-theme/webapp/common/js/package.json @@ -4,13 +4,13 @@ "repository": "https://github.com/apache/ofbiz-framework.git", "license": "Apache-2.0", "dependencies": { + "dompurify": "^2.3.4", + "flot": "^4.2.2", "jquery": "^3.6.0", "jquery-migrate": "^3.3.2", - "jquery-validation": "^1.19.3", - "jquery.browser": "^0.1.0", - "dompurify": "^2.3.4", "jquery-ui-dist": "^1.13.0", - "trumbowyg": "^2.25.1", - "flot": "^4.2.2" + "jquery-validation": "^1.19.4", + "jquery.browser": "^0.1.0", + "trumbowyg": "^2.25.1" } }