tei/MapLibreParticleLab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[android] lodash < 4.7.19 vulnerable to prototype pollution attack

Browse Source
This commit is contained in:
Petr Pokorny
2020-12-22 12:38:05 +01:00
parent d97eaba699
commit aaf8aa041c
2 changed files with 84 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

86
platform/android/package-lock.json generated
View File

@@ -1,8 +1,80 @@
{
"name": "@mapbox/mapbox-gl-native-android",
"version": "1.0.0",
"lockfileVersion": 1,
"lockfileVersion": 2,
"requires": true,
"packages": {
"": {
"name": "@mapbox/mapbox-gl-native-android",
"version": "1.0.0",
"license": "BSD-2-Clause",
"devDependencies": {
"ejs": "^2.7.4",
"esm": "~3.1.0",
"lodash": "^4.17.19",
"pixelmatch": "^4.0.2",
"semver": "^5.5.0"
},
"engines": {
"node": ">=6"
}
},
"node_modules/ejs": {
"version": "2.7.4",
"resolved": "https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz",
"integrity": "sha512-7vmuyh5+kuUyJKePhQfRQBhXV5Ce+RnaeeQArKu1EAMpL3WbgMt5WG6uQZpEVvYSSsxMXRKOewtDk9RaTKXRlA==",
"dev": true,
"hasInstallScript": true,
"engines": {
"node": ">=0.10.0"
}
},
"node_modules/esm": {
"version": "3.1.0",
"resolved": "https://registry.npmjs.org/esm/-/esm-3.1.0.tgz",
"integrity": "sha512-r4Go7Wh7Wh0WPinRXeeM9PIajRsUdt8SAyki5R1obVc0+BwtqvtjbngVSSdXg0jCe2xZkY8hyBMx6q/uymUkPw==",
"dev": true,
"engines": {
"node": ">=6"
}
},
"node_modules/lodash": {
"version": "4.17.19",
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
"integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==",
"dev": true
},
"node_modules/pixelmatch": {
"version": "4.0.2",
"resolved": "https://registry.npmjs.org/pixelmatch/-/pixelmatch-4.0.2.tgz",
"integrity": "sha1-j0fc7FARtHe2fbA8JDvB8wheiFQ=",
"dev": true,
"dependencies": {
"pngjs": "^3.0.0"
},
"bin": {
"pixelmatch": "bin/pixelmatch"
}
},
"node_modules/pngjs": {
"version": "3.4.0",
"resolved": "https://registry.npmjs.org/pngjs/-/pngjs-3.4.0.tgz",
"integrity": "sha512-NCrCHhWmnQklfH4MtJMRjZ2a8c80qXeMlQMv2uVp9ISJMTt562SbGd6n2oq0PaPgKm7Z6pL9E2UlLIhC+SHL3w==",
"dev": true,
"engines": {
"node": ">=4.0.0"
}
},
"node_modules/semver": {
"version": "5.7.1",
"resolved": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz",
"integrity": "sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ==",
"dev": true,
"bin": {
"semver": "bin/semver"
}
}
},
"dependencies": {
"ejs": {
"version": "2.7.4",
@@ -17,9 +89,9 @@
"dev": true
},
"lodash": {
"version": "4.17.15",
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
"version": "4.17.19",
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
"integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==",
"dev": true
},
"pixelmatch": {
@@ -36,6 +108,12 @@
"resolved": "https://registry.npmjs.org/pngjs/-/pngjs-3.4.0.tgz",
"integrity": "sha512-NCrCHhWmnQklfH4MtJMRjZ2a8c80qXeMlQMv2uVp9ISJMTt562SbGd6n2oq0PaPgKm7Z6pL9E2UlLIhC+SHL3w==",
"dev": true
},
"semver": {
"version": "5.7.1",
"resolved": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz",
"integrity": "sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ==",
"dev": true
}
}
}

5
platform/android/package.json
View File

@@ -11,13 +11,12 @@
"url": "git@github.com:mapbox/mapbox-gl-native-android.git"
},
"license": "BSD-2-Clause",
"dependencies": {},
"devDependencies": {
"ejs": "^2.7.4",
"esm": "~3.1.0",
"lodash": "^4.16.4",
"lodash": "^4.17.19",
"pixelmatch": "^4.0.2",
"semver": "^5.5.0"
"semver": "^5.5.0"
},
"engines": {
"node": ">=6"