Skip to content

Commit 4e0ba9c

Browse files
antonisclaude
andauthored
chore(deps): bump socks to ^2.8.8 to fix ip-address XSS vulnerability (#6117)
Resolves Dependabot alert #527. socks 2.8.8 upgrades ip-address from 9.0.5 to ^10.1.1, which fixes the XSS in Address6 HTML-emitting methods. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
1 parent a3f33ce commit 4e0ba9c

2 files changed

Lines changed: 11 additions & 27 deletions

File tree

package.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -131,6 +131,7 @@
131131
"appium-ios-remotexpc@npm:0.36.0/@xmldom/xmldom": "^0.9.10",
132132
"appium-ios-simulator@npm:8.0.12/@xmldom/xmldom": "^0.9.10",
133133
"postcss": "^8.5.10",
134+
"socks": "^2.8.8",
134135
"@appium/support@npm:7.0.6/uuid": "^13.0.1",
135136
"node-simctl@npm:8.1.6/uuid": "^13.0.1"
136137
},

yarn.lock

Lines changed: 10 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -19979,13 +19979,10 @@ __metadata:
1997919979
languageName: node
1998019980
linkType: hard
1998119981

19982-
"ip-address@npm:^9.0.5":
19983-
version: 9.0.5
19984-
resolution: "ip-address@npm:9.0.5"
19985-
dependencies:
19986-
jsbn: "npm:1.1.0"
19987-
sprintf-js: "npm:^1.1.3"
19988-
checksum: aa15f12cfd0ef5e38349744e3654bae649a34c3b10c77a674a167e99925d1549486c5b14730eebce9fea26f6db9d5e42097b00aa4f9f612e68c79121c71652dc
19982+
"ip-address@npm:^10.1.1":
19983+
version: 10.2.0
19984+
resolution: "ip-address@npm:10.2.0"
19985+
checksum: 3ffba04dc4cdaf81ed2ed6edc47eee1494bb97550ef73f1918ca28405d175c03efa416b8337e868123b08c2cc677e3a07c5ce03eda3b1aeb2741c149bd37ddf9
1998919986
languageName: node
1999019987
linkType: hard
1999119988

@@ -21475,13 +21472,6 @@ __metadata:
2147521472
languageName: node
2147621473
linkType: hard
2147721474

21478-
"jsbn@npm:1.1.0":
21479-
version: 1.1.0
21480-
resolution: "jsbn@npm:1.1.0"
21481-
checksum: 944f924f2bd67ad533b3850eee47603eed0f6ae425fd1ee8c760f477e8c34a05f144c1bd4f5a5dd1963141dc79a2c55f89ccc5ab77d039e7077f3ad196b64965
21482-
languageName: node
21483-
linkType: hard
21484-
2148521475
"jsc-android@npm:^250231.0.0":
2148621476
version: 250231.0.0
2148721477
resolution: "jsc-android@npm:250231.0.0"
@@ -30487,13 +30477,13 @@ __metadata:
3048730477
languageName: node
3048830478
linkType: hard
3048930479

30490-
"socks@npm:^2.8.3":
30491-
version: 2.8.3
30492-
resolution: "socks@npm:2.8.3"
30480+
"socks@npm:^2.8.8":
30481+
version: 2.8.8
30482+
resolution: "socks@npm:2.8.8"
3049330483
dependencies:
30494-
ip-address: "npm:^9.0.5"
30495-
smart-buffer: "npm:^4.2.0"
30496-
checksum: 7a6b7f6eedf7482b9e4597d9a20e09505824208006ea8f2c49b71657427f3c137ca2ae662089baa73e1971c62322d535d9d0cf1c9235cf6f55e315c18203eadd
30484+
ip-address: ^10.1.1
30485+
smart-buffer: ^4.2.0
30486+
checksum: 5a79651f9bf512326281b7e10c1649da2c370e062881679b07d7a680f8b1c7c734b50c986551d9c6d876de0c321eced6fae3c1d155f03162ea5e8340bd3b8487
3049730487
languageName: node
3049830488
linkType: hard
3049930489

@@ -30661,13 +30651,6 @@ __metadata:
3066130651
languageName: node
3066230652
linkType: hard
3066330653

30664-
"sprintf-js@npm:^1.1.3":
30665-
version: 1.1.3
30666-
resolution: "sprintf-js@npm:1.1.3"
30667-
checksum: a3fdac7b49643875b70864a9d9b469d87a40dfeaf5d34d9d0c5b1cda5fd7d065531fcb43c76357d62254c57184a7b151954156563a4d6a747015cfb41021cad0
30668-
languageName: node
30669-
linkType: hard
30670-
3067130654
"sprintf-js@npm:~1.0.2":
3067230655
version: 1.0.3
3067330656
resolution: "sprintf-js@npm:1.0.3"

0 commit comments

Comments
 (0)