Skip to content

Commit c0a7ee7

Browse files
antonisclaude
andauthored
chore(deps): bump fast-xml-parser to ^5.7.0 (#6043)
Fixes Dependabot alert for XML Comment and CDATA injection via unescaped delimiters in XMLBuilder. Dev-only dependency. https://github.com/getsentry/sentry-react-native/security/dependabot/510 Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 9b52789 commit c0a7ee7

2 files changed

Lines changed: 32 additions & 17 deletions

File tree

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -99,7 +99,7 @@
9999
"webdriverio@npm:8.40.5/minimatch": "^9.0.7",
100100
"glob@npm:13.0.0/minimatch": "^10.2.3",
101101
"axios": "^1.15.0",
102-
"fast-xml-parser": "^5.5.7",
102+
"fast-xml-parser": "^5.7.0",
103103
"form-data": "4.0.5",
104104
"qs": "^6.14.2",
105105
"lodash": "^4.18.1",

yarn.lock

Lines changed: 31 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -6793,6 +6793,13 @@ __metadata:
67936793
languageName: node
67946794
linkType: hard
67956795

6796+
"@nodable/entities@npm:^2.1.0":
6797+
version: 2.1.0
6798+
resolution: "@nodable/entities@npm:2.1.0"
6799+
checksum: ae5a432a665d210bb28b3a9dbe8caf49f46be65fdc626bd14febe8f150b735182efb6967fe12f8c8f39d22e572b8b9361b4915aec094f8cea5e01f683191cf80
6800+
languageName: node
6801+
linkType: hard
6802+
67966803
"@nodelib/fs.scandir@npm:2.1.5":
67976804
version: 2.1.5
67986805
resolution: "@nodelib/fs.scandir@npm:2.1.5"
@@ -18308,25 +18315,26 @@ __metadata:
1830818315
languageName: node
1830918316
linkType: hard
1831018317

18311-
"fast-xml-builder@npm:^1.1.4":
18312-
version: 1.1.4
18313-
resolution: "fast-xml-builder@npm:1.1.4"
18318+
"fast-xml-builder@npm:^1.1.5":
18319+
version: 1.1.5
18320+
resolution: "fast-xml-builder@npm:1.1.5"
1831418321
dependencies:
1831518322
path-expression-matcher: ^1.1.3
18316-
checksum: 90b019ed6f52cb30342a58d4bf8726a7723b4110cb9c0fd3fa2031e87506e8b18740fd349472926c9e2925d22ca6637b6d46a20eda537473cf63366970db4d7b
18323+
checksum: 02ea4ea959ed985033895a2000555c22f91f93e30376f7e11ee384f3839f5af3c97a8a646e4d6ba585a9b42e949b13ec89ce8bda061ee48b32a1b49f1c713372
1831718324
languageName: node
1831818325
linkType: hard
1831918326

18320-
"fast-xml-parser@npm:^5.5.7":
18321-
version: 5.5.8
18322-
resolution: "fast-xml-parser@npm:5.5.8"
18327+
"fast-xml-parser@npm:^5.7.0":
18328+
version: 5.7.1
18329+
resolution: "fast-xml-parser@npm:5.7.1"
1832318330
dependencies:
18324-
fast-xml-builder: ^1.1.4
18325-
path-expression-matcher: ^1.2.0
18326-
strnum: ^2.2.0
18331+
"@nodable/entities": ^2.1.0
18332+
fast-xml-builder: ^1.1.5
18333+
path-expression-matcher: ^1.5.0
18334+
strnum: ^2.2.3
1832718335
bin:
1832818336
fxparser: src/cli/cli.js
18329-
checksum: 58261aaaeb355a325dc1b27ae28e6f8da55e9f8e0560dd752c8a39a4adbaebe560cbbfe924efb44ebf991dbdff76ae6f80a4900d1d03fd720509cb323263bf13
18337+
checksum: 863ed69cf556a895231a80ed0091e12671f0d45af336169db55b7cc81c15cd767324469f392df68c5242e80bc416a69394fe69e6287bcb4ef1507875c7b0df84
1833018338
languageName: node
1833118339
linkType: hard
1833218340

@@ -27098,13 +27106,20 @@ __metadata:
2709827106
languageName: node
2709927107
linkType: hard
2710027108

27101-
"path-expression-matcher@npm:^1.1.3, path-expression-matcher@npm:^1.2.0":
27109+
"path-expression-matcher@npm:^1.1.3":
2710227110
version: 1.2.0
2710327111
resolution: "path-expression-matcher@npm:1.2.0"
2710427112
checksum: 2811aab3269c288893aef09e5127124d3c434bfc7e1352fea6b7dd81ed20260001b072ff60bdcaaa393d50a4333725290dbad47bb612d95f5448e499b4ac887f
2710527113
languageName: node
2710627114
linkType: hard
2710727115

27116+
"path-expression-matcher@npm:^1.5.0":
27117+
version: 1.5.0
27118+
resolution: "path-expression-matcher@npm:1.5.0"
27119+
checksum: 52f0491a88f728f2eefb83a5c4f84f1185a8572e34ba41a72f88e270d5796c966ec1fe78e978599c490ccac0656a4cc55d75485538393873d32a4ef096a8dda6
27120+
languageName: node
27121+
linkType: hard
27122+
2710827123
"path-is-absolute@npm:^1.0.0":
2710927124
version: 1.0.1
2711027125
resolution: "path-is-absolute@npm:1.0.1"
@@ -31406,10 +31421,10 @@ __metadata:
3140631421
languageName: node
3140731422
linkType: hard
3140831423

31409-
"strnum@npm:^2.2.0":
31410-
version: 2.2.1
31411-
resolution: "strnum@npm:2.2.1"
31412-
checksum: 23173b1b849859b9aca0288dde36d16095b07d81995de2e2fe29ae070f2e7b4933049f2e211ba03e48152a9281108ba7d4db826a3878f099bff52a3b81f5e273
31424+
"strnum@npm:^2.2.3":
31425+
version: 2.2.3
31426+
resolution: "strnum@npm:2.2.3"
31427+
checksum: e8deb0dd6f40e4a878bdd4404bdfdd47922665fcaaf27f2b345013b30d45d86f4b93d99cbc005bfb7c96edef6173369bd76a9df40bb7758850b7864075a28156
3141331428
languageName: node
3141431429
linkType: hard
3141531430

0 commit comments

Comments
 (0)