mirror of
https://github.com/overleaf/overleaf.git
synced 2024-10-17 21:05:04 -04:00
485710538d
* [CE/SP] Hotfix 5.0.4 Remove unused packages with vulnerable dependencies. Upgrade sanitize-html in scripts directory to get security updates. Upgrade swagger-tools dependencies to get security updates. * add note about overrides to server pro release checklist * remove unused services/web/scripts/translations directory from server-pro * include #18393 and #18444 in server pro hotfix 5.0.4 * clean up after patching package-lock apply package-lock patch at start of hotfix build run npm audit at end of hotfix build GitOrigin-RevId: a253def01d481961cd16f4374e2ccffa00417c1f
63 lines
2.1 KiB
Diff
63 lines
2.1 KiB
Diff
diff --git a/package-lock.json b/package-lock.json
|
|
index b9eba6086b..bb1a5cebaf 100644
|
|
--- a/package-lock.json
|
|
+++ b/package-lock.json
|
|
@@ -70674,8 +70674,7 @@
|
|
"integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
|
|
},
|
|
"multer": {
|
|
- "version": "1.4.4",
|
|
- "resolved": "https://registry.npmjs.org/multer/-/multer-1.4.4.tgz",
|
|
+ "version": "https://registry.npmjs.org/multer/-/multer-1.4.4.tgz",
|
|
"integrity": "sha512-2wY2+xD4udX612aMqMcB8Ws2Voq6NIUPEtD1be6m411T4uDH/VtL9i//xvcyFlTVfRdaBsk7hV5tgrGQqhuBiw==",
|
|
"requires": {
|
|
"append-field": "^1.0.0",
|
|
@@ -76995,10 +76994,10 @@
|
|
"js-yaml": "^3.3.1",
|
|
"json-refs": "^3.0.2",
|
|
"lodash": "^4.17.4",
|
|
- "multer": "^1.1.0",
|
|
+ "multer": "1.4.5-lts.1",
|
|
"parseurl": "^1.3.0",
|
|
"path-to-regexp": "^2.0.0",
|
|
- "qs": "^6.0.3",
|
|
+ "qs": "6.5.3",
|
|
"serve-static": "^1.10.0",
|
|
"spark-md5": "^3.0.0",
|
|
"superagent": "^3.5.2",
|
|
@@ -77035,7 +77034,7 @@
|
|
"http-errors": "~1.6.2",
|
|
"iconv-lite": "0.4.19",
|
|
"on-finished": "~2.3.0",
|
|
- "qs": "6.5.1",
|
|
+ "qs": "6.5.3",
|
|
"raw-body": "2.3.2",
|
|
"type-is": "~1.6.15"
|
|
},
|
|
@@ -77109,8 +77108,7 @@
|
|
"integrity": "sha512-G6zHoVqC6GGTQkZwF4lkuEyMbVOjoBKAEybQUypI1WTkqinCOrq2x6U2+phkJ1XsEMTy4LjtwPI7HW+NVrRR2w=="
|
|
},
|
|
"qs": {
|
|
- "version": "6.5.1",
|
|
- "resolved": "https://registry.npmjs.org/qs/-/qs-6.5.1.tgz",
|
|
+ "version": "https://registry.npmjs.org/qs/-/qs-6.5.1.tgz",
|
|
"integrity": "sha512-eRzhrN1WSINYCDCbrz796z37LOe3m5tmW7RQf6oBntukAG1nmovJvhnwHHRMAfeoItc1m2Hk02WER2aQ/iqs+A=="
|
|
},
|
|
"raw-body": {
|
|
diff --git a/package.json b/package.json
|
|
index f092472caf..329d4fc5ce 100644
|
|
--- a/package.json
|
|
+++ b/package.json
|
|
@@ -1,6 +1,12 @@
|
|
{
|
|
"name": "overleaf",
|
|
"private": true,
|
|
+ "overrides": {
|
|
+ "swagger-tools": {
|
|
+ "multer": "1.4.5-lts.1",
|
|
+ "qs": "6.5.3"
|
|
+ }
|
|
+ },
|
|
"dependencies": {
|
|
"patch-package": "^8.0.0"
|
|
},
|