Skip to content

Commit a3f33ce

Browse files
antonisclaude
andauthored
chore(deps): bump uuid to ^13.0.1 to fix buffer bounds check vulnerability (#6118)
Adds scoped resolutions for @appium/support and node-simctl to upgrade uuid from 13.0.0 to ^13.0.1. Fixes missing buffer bounds check in v3/v5/v6 when buf is provided. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
1 parent ad66da3 commit a3f33ce

2 files changed

Lines changed: 12 additions & 10 deletions

File tree

package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -130,7 +130,9 @@
130130
"@appium/support@npm:7.0.6/yauzl": "^3.2.1",
131131
"appium-ios-remotexpc@npm:0.36.0/@xmldom/xmldom": "^0.9.10",
132132
"appium-ios-simulator@npm:8.0.12/@xmldom/xmldom": "^0.9.10",
133-
"postcss": "^8.5.10"
133+
"postcss": "^8.5.10",
134+
"@appium/support@npm:7.0.6/uuid": "^13.0.1",
135+
"node-simctl@npm:8.1.6/uuid": "^13.0.1"
134136
},
135137
"version": "0.0.0",
136138
"name": "sentry-react-native",

yarn.lock

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -32552,15 +32552,6 @@ __metadata:
3255232552
languageName: node
3255332553
linkType: hard
3255432554

32555-
"uuid@npm:13.0.0, uuid@npm:^13.0.0":
32556-
version: 13.0.0
32557-
resolution: "uuid@npm:13.0.0"
32558-
bin:
32559-
uuid: dist-node/bin/uuid
32560-
checksum: 7510ee1ab371be5339ef26ff8cabc2f4a2c60640ff880652968f758072f53bd4f4af1c8b0e671a8c9bb29ef926a24dec3ef0e3861d78183b39291a85743a9f96
32561-
languageName: node
32562-
linkType: hard
32563-
3256432555
"uuid@npm:^10.0.0":
3256532556
version: 10.0.0
3256632557
resolution: "uuid@npm:10.0.0"
@@ -32570,6 +32561,15 @@ __metadata:
3257032561
languageName: node
3257132562
linkType: hard
3257232563

32564+
"uuid@npm:^13.0.1":
32565+
version: 13.0.2
32566+
resolution: "uuid@npm:13.0.2"
32567+
bin:
32568+
uuid: dist-node/bin/uuid
32569+
checksum: b8ca7da03b5563ad7ee9a9e38f5c6d63709183d5ae5c8f4c638fcf6f7349e7f3f0e4d1699f24f42d9f7b0f2f6e376a11c032750d2fc4a45e2dfab70142c9caf1
32570+
languageName: node
32571+
linkType: hard
32572+
3257332573
"uuid@npm:^7.0.3":
3257432574
version: 7.0.3
3257532575
resolution: "uuid@npm:7.0.3"

0 commit comments

Comments
 (0)