Skip to content

Commit 0936fda

Browse files
fix: upgrade handlebars to 4.7.9 to resolve critical vulnerability (calcom#28625)
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
1 parent 2fc630e commit 0936fda

3 files changed

Lines changed: 16 additions & 16 deletions

File tree

apps/web/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -92,7 +92,7 @@
9292
"classnames": "2.3.2",
9393
"dompurify": "3.3.1",
9494
"entities": "4.5.0",
95-
"handlebars": "4.7.7",
95+
"handlebars": "4.7.9",
9696
"i18next": "23.2.3",
9797
"ical.js": "1.5.0",
9898
"ics": "2.37.0",

packages/features/auth/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515
"@calcom/ui": "workspace:*",
1616
"bcryptjs": "2.4.3",
1717
"dub": "0.59.1",
18-
"handlebars": "4.7.7",
18+
"handlebars": "4.7.9",
1919
"jose": "4.15.9",
2020
"lru-cache": "9.0.3",
2121
"next-auth": "4.24.13",

yarn.lock

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -2506,7 +2506,7 @@ __metadata:
25062506
"@calcom/ui": "workspace:*"
25072507
bcryptjs: "npm:2.4.3"
25082508
dub: "npm:0.59.1"
2509-
handlebars: "npm:4.7.7"
2509+
handlebars: "npm:4.7.9"
25102510
jose: "npm:4.15.9"
25112511
lru-cache: "npm:9.0.3"
25122512
next-auth: "npm:4.24.13"
@@ -2735,7 +2735,7 @@ __metadata:
27352735
languageName: unknown
27362736
linkType: soft
27372737

2738-
"@calcom/lib@workspace:*, @calcom/lib@workspace:packages/lib":
2738+
"@calcom/lib@npm:*, @calcom/lib@workspace:*, @calcom/lib@workspace:packages/lib":
27392739
version: 0.0.0-use.local
27402740
resolution: "@calcom/lib@workspace:packages/lib"
27412741
dependencies:
@@ -2780,9 +2780,9 @@ __metadata:
27802780
version: 0.0.0-use.local
27812781
resolution: "@calcom/lyra@workspace:packages/app-store/lyra"
27822782
dependencies:
2783-
"@calcom/lib": "workspace:*"
2784-
"@calcom/prisma": "workspace:*"
2785-
"@calcom/types": "workspace:*"
2783+
"@calcom/lib": "npm:*"
2784+
"@calcom/prisma": "npm:*"
2785+
"@calcom/types": "npm:*"
27862786
languageName: unknown
27872787
linkType: soft
27882788

@@ -2972,7 +2972,7 @@ __metadata:
29722972
languageName: unknown
29732973
linkType: soft
29742974

2975-
"@calcom/prisma@workspace:*, @calcom/prisma@workspace:packages/prisma":
2975+
"@calcom/prisma@npm:*, @calcom/prisma@workspace:*, @calcom/prisma@workspace:packages/prisma":
29762976
version: 0.0.0-use.local
29772977
resolution: "@calcom/prisma@workspace:packages/prisma"
29782978
dependencies:
@@ -3212,7 +3212,7 @@ __metadata:
32123212
languageName: unknown
32133213
linkType: soft
32143214

3215-
"@calcom/types@workspace:*, @calcom/types@workspace:packages/types":
3215+
"@calcom/types@npm:*, @calcom/types@workspace:*, @calcom/types@workspace:packages/types":
32163216
version: 0.0.0-use.local
32173217
resolution: "@calcom/types@workspace:packages/types"
32183218
dependencies:
@@ -3415,7 +3415,7 @@ __metadata:
34153415
env-cmd: "npm:10.1.0"
34163416
glob: "npm:10.4.5"
34173417
google-auth-library: "npm:9.15.0"
3418-
handlebars: "npm:4.7.7"
3418+
handlebars: "npm:4.7.9"
34193419
i18next: "npm:23.2.3"
34203420
ical.js: "npm:1.5.0"
34213421
ics: "npm:2.37.0"
@@ -24183,12 +24183,12 @@ __metadata:
2418324183
languageName: node
2418424184
linkType: hard
2418524185

24186-
"handlebars@npm:4.7.7":
24187-
version: 4.7.7
24188-
resolution: "handlebars@npm:4.7.7"
24186+
"handlebars@npm:4.7.9":
24187+
version: 4.7.9
24188+
resolution: "handlebars@npm:4.7.9"
2418924189
dependencies:
2419024190
minimist: "npm:^1.2.5"
24191-
neo-async: "npm:^2.6.0"
24191+
neo-async: "npm:^2.6.2"
2419224192
source-map: "npm:^0.6.1"
2419324193
uglify-js: "npm:^3.1.4"
2419424194
wordwrap: "npm:^1.0.0"
@@ -24197,7 +24197,7 @@ __metadata:
2419724197
optional: true
2419824198
bin:
2419924199
handlebars: bin/handlebars
24200-
checksum: 10/617b1e689b7577734abc74564bdb8cdaddf8fd48ce72afdb489f426e9c60a7d6ee2a2707c023720c4059070128243c948bded8f2716e4543378033e3971b85ea
24200+
checksum: 10/e755433d652e8a15fc02f83d7478e652359e7a4d354c4328818853ed4f8a39d4a09e1d22dad3c7213c5240864a65b3c840970b8b181745575dd957dd258f2b8d
2420124201
languageName: node
2420224202
linkType: hard
2420324203

@@ -29987,7 +29987,7 @@ __metadata:
2998729987
languageName: node
2998829988
linkType: hard
2998929989

29990-
"neo-async@npm:^2.6.0, neo-async@npm:^2.6.2":
29990+
"neo-async@npm:^2.6.2":
2999129991
version: 2.6.2
2999229992
resolution: "neo-async@npm:2.6.2"
2999329993
checksum: 10/1a7948fea86f2b33ec766bc899c88796a51ba76a4afc9026764aedc6e7cde692a09067031e4a1bf6db4f978ccd99e7f5b6c03fe47ad9865c3d4f99050d67e002

0 commit comments

Comments
 (0)