Commits on May 11, 2023

1. [CVE-2022-48285][1.x] Bump jszip from 3.7.1 to 3.10.1 (#3740) …

   * [CVE-2022-48285][1.x] Bump jszip from 3.7.1 to 3.10.1
   
   loadAsync in JSZip before 3.8.0 allows Directory Traversal
   via a crafted ZIP archive. This CVE requires to bump jszip to
   3.8.0+.
   
   Signed-off-by: Anan Zhuang <ananzh@amazon.com>
   
   * remove unecessary resolution
   
   remove yarn.lock entry, clean and bootstrap
   
   Signed-off-by: Josh Romero <rmerqg@amazon.com>
   
   ---------
   
   Signed-off-by: Anan Zhuang <ananzh@amazon.com>
   Signed-off-by: Josh Romero <rmerqg@amazon.com>
   Co-authored-by: Josh Romero <rmerqg@amazon.com>
   Co-authored-by: Sean Neumann <1413295+seanneumann@users.noreply.github.com>
   (cherry picked from commit 364832d)
   Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
   
   # Conflicts:
   #	CHANGELOG.md

   

   github-actions[bot] committed May 11, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for fb657c2
   • Browse repository at this point

   Copy the full SHA

   fb657c2 View commit details

   Browse the repository at this point in the history