Skip to content

Update dependency net.minidev:json-smart to v2.4.9 #70

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 26, 2023
Merged

Update dependency net.minidev:json-smart to v2.4.9 #70

merged 1 commit into from
Apr 26, 2023

Conversation

mend-for-g.yxqyang.asia[bot]
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
net.minidev:json-smart (source) dependencies patch 2.4.8 -> 2.4.9

By merging this PR, the issue #69 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 7.5 CVE-2023-1370

Release Notes

netplex/json-smart-v2

v2.4.9: V 2.4.9

Compare Source

V 2.4.9 (2023-03-07)
  • Add depth limit of 400 when parsing JSON.

What's Changed

New Contributors

Full Changelog: netplex/json-smart-v2@2.4.8...2.4.9

  • If you want to rebase/retry this PR, check this box

@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot added the security fix Security fix generated by Mend label Apr 26, 2023
@rupal-bq rupal-bq merged commit 1801978 into main Apr 26, 2023
@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot deleted the whitesource-remediate/net.minidev-json-smart-2.x branch April 26, 2023 22:59
@opensearch-trigger-bot
Copy link

The backport to 2.x failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-2.x 2.x
# Navigate to the new working tree
cd .worktrees/backport-2.x
# Create a new branch
git switch --create backport/backport-70-to-2.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 18019787187b4a48898c9a2ebd09b17cd5c2784d
# Push it to GitHub
git push --set-upstream origin backport/backport-70-to-2.x
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-2.x

Then, create a pull request where the base branch is 2.x and the compare/head branch is backport/backport-70-to-2.x.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@rupal-bq rupal-bq rupal-bq approved these changes

@nknize nknize Awaiting requested review from nknize

@penghuo penghuo Awaiting requested review from penghuo penghuo is a code owner

@ps48 ps48 Awaiting requested review from ps48 ps48 is a code owner

@kavithacm kavithacm Awaiting requested review from kavithacm kavithacm is a code owner

@derek-ho derek-ho Awaiting requested review from derek-ho derek-ho is a code owner

@joshuali925 joshuali925 Awaiting requested review from joshuali925 joshuali925 is a code owner

@YANG-DB YANG-DB Awaiting requested review from YANG-DB YANG-DB is a code owner

@CEHENKLE CEHENKLE Awaiting requested review from CEHENKLE

@mengweieric mengweieric Awaiting requested review from mengweieric mengweieric is a code owner

@vamsimanohar vamsimanohar Awaiting requested review from vamsimanohar

Assignees
No one assigned
Labels
backport 2.x security fix Security fix generated by Mend
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@rupal-bq