gitlab-org--gitlab-foss/changelogs/unreleased/63945-update-mixin-deep-to-1-3-2.yml
Takuya Noguchi e549a7fb1f Update mixin-deep to 1.3.2
To address a Prototype Pollution vulnerability,
which exists in `mixin-deep` package, versions
`>=2.0.0 <2.0.1 || <1.3.2` (CVE-2019-10746).

- Diff: https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2
- Synk ID: https://app.snyk.io/vuln/SNYK-JS-MIXINDEEP-450212

Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
2019-07-01 18:56:28 +09:00

5 lines
94 B
YAML

---
title: Update mixin-deep to 1.3.2
merge_request: 30223
author: Takuya Noguchi
type: other