From 25ea5fcaf2dc7dbf341d7c905b0a31dbd8277cbd Mon Sep 17 00:00:00 2001 From: Dominik Prokop Date: Thu, 25 Apr 2019 09:42:32 +0200 Subject: [PATCH] Chore: bump jQuery to 3.4.0 including prototype pollution vulnerability fix (#16761) Ref: https://nvd.nist.gov/vuln/detail/CVE-2019-5428 --- package.json | 2 +- yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index dd70e906a36..87ab3a09c7e 100644 --- a/package.json +++ b/package.json @@ -190,7 +190,7 @@ "eventemitter3": "2.0.3", "file-saver": "1.3.8", "immutable": "3.8.2", - "jquery": "3.3.1", + "jquery": "3.4.0", "lodash": "4.17.11", "moment": "2.24.0", "mousetrap": "1.6.3", diff --git a/yarn.lock b/yarn.lock index 44d819149b8..21b9db2e0d7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -10016,6 +10016,11 @@ jquery@3.3.1: resolved "https://registry.yarnpkg.com/jquery/-/jquery-3.3.1.tgz#958ce29e81c9790f31be7792df5d4d95fc57fbca" integrity sha512-Ubldcmxp5np52/ENotGxlLe6aGMvmF4R8S6tZjsP6Knsaxd/xp3Zrh50cG93lR6nPXyUFwzN3ZSOQI0wRJNdGg== +jquery@3.4.0: + version "3.4.0" + resolved "https://registry.yarnpkg.com/jquery/-/jquery-3.4.0.tgz#8de513fa0fa4b2c7d2e48a530e26f0596936efdf" + integrity sha512-ggRCXln9zEqv6OqAGXFEcshF5dSBvCkzj6Gm2gzuR5fWawaX8t7cxKVkkygKODrDAzKdoYw3l/e3pm3vlT4IbQ== + js-base64@^2.1.8, js-base64@^2.1.9: version "2.5.1" resolved "https://registry.yarnpkg.com/js-base64/-/js-base64-2.5.1.tgz#1efa39ef2c5f7980bb1784ade4a8af2de3291121"