mudhorn/n8n
1
0
Fork 0
mirror of https://github.com/n8n-io/n8n.git synced 2024-12-23 11:44:06 -08:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

fix(core): Upgrade express to address CVE-2024-29041 (no-changelog) (#9021)

Browse source
This commit is contained in:
कारतोफ्फेलस्क्रिप्ट™ 2024-04-03 17:08:06 +02:00 committed by GitHub
parent bcd39a110b
commit dc42ac17a6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 38 additions and 42 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
packages/cli/package.json
View file

@ -121,7 +121,7 @@
"csrf": "3.1.0",
"curlconverter": "3.21.0",
"dotenv": "8.6.0",
"express": "4.18.3",
"express": "4.19.2",
"express-async-errors": "3.1.1",
"express-handlebars": "7.1.2",
"express-openapi-validator": "5.1.6",

78
pnpm-lock.yaml
View file

@ -520,11 +520,11 @@ importers:
specifier: 8.6.0
version: 8.6.0
express:
specifier: 4.18.3
version: 4.18.3
specifier: 4.19.2
version: 4.19.2
express-async-errors:
specifier: 3.1.1
version: 3.1.1(express@4.18.3)
version: 3.1.1(express@4.19.2)
express-handlebars:
specifier: 7.1.2
version: 7.1.2
@ -536,7 +536,7 @@ importers:
version: 6.6.0(prom-client@13.2.0)
express-rate-limit:
specifier: 7.2.0
version: 7.2.0(express@4.18.3)
version: 7.2.0(express@4.19.2)
fast-glob:
specifier: 3.2.12
version: 3.2.12
@ -677,7 +677,7 @@ importers:
version: 1.17.0
swagger-ui-express:
specifier: 5.0.0
version: 5.0.0(express@4.18.3)
version: 5.0.0(express@4.19.2)
syslog-client:
specifier: 1.1.1
version: 1.1.1
@ -8476,7 +8476,7 @@ packages:
ejs: 3.1.9
esbuild: 0.19.8
esbuild-plugin-alias: 0.2.1
express: 4.18.3
express: 4.19.2
fs-extra: 11.1.1
process: 0.11.10
util: 0.12.5
@ -8512,7 +8512,7 @@ packages:
'@types/find-cache-dir': 3.2.1
browser-assert: 1.2.1
es-module-lexer: 0.9.3
express: 4.18.3
express: 4.19.2
find-cache-dir: 3.3.2
fs-extra: 11.1.1
magic-string: 0.30.8
@ -8704,7 +8704,7 @@ packages:
cli-table3: 0.6.3
compression: 1.7.4
detect-port: 1.5.1
express: 4.18.3
express: 4.19.2
fs-extra: 11.1.1
globby: 11.1.0
ip: 2.0.1
@ -12068,7 +12068,7 @@ packages:
resolution: {integrity: sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==}
dependencies:
function-bind: 1.1.2
get-intrinsic: 1.2.1
get-intrinsic: 1.2.4
/call-bind@1.0.7:
resolution: {integrity: sha512-GHTSNSYICQ7scH7sZ+M2rFopRoLh8t2bLSW6BbgrtLsahOIB5iyAVJf9GjWK3cYTDaMj4XdBpM1cA6pIS0Kv2w==}
@ -12807,6 +12807,7 @@ packages:
/content-type@1.0.4:
resolution: {integrity: sha512-hIP3EEPs8tB9AT1L+NUqtwOAps4mk2Zob89MWXMHjHWg9milF/j4osnnQLXBCBFBk/tvIG/tUc9mOUJiPBhPXA==}
engines: {node: '>= 0.6'}
dev: false
/content-type@1.0.5:
resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
@ -12849,8 +12850,8 @@ packages:
engines: {node: '>= 0.6'}
dev: false
/cookie@0.5.0:
resolution: {integrity: sha512-YZ3GUyn/o8gfKJlnlX7g7xq4gyO6OSuhGPKaaGssGB2qgDUS0gPgtTvoyZLTt9Ab6dC4hfc9dV5arkvc/OCmrw==}
/cookie@0.6.0:
resolution: {integrity: sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==}
engines: {node: '>= 0.6'}
/cookiejar@2.1.4:
@ -13474,7 +13475,7 @@ packages:
resolution: {integrity: sha512-xvqAVKGfT1+UAvPwKTVw/njhdQ8ZhXK4lI0bCIuCMrp2up9nPnaDftrLtmpTazqd1o+UY4zgzU+avtMbDP+ldA==}
engines: {node: '>= 0.4'}
dependencies:
has-property-descriptors: 1.0.0
has-property-descriptors: 1.0.2
object-keys: 1.1.1
/define-properties@1.2.1:
@ -13975,8 +13976,8 @@ packages:
globalthis: 1.0.3
gopd: 1.0.1
has: 1.0.3
has-property-descriptors: 1.0.0
has-proto: 1.0.1
has-property-descriptors: 1.0.2
has-proto: 1.0.3
has-symbols: 1.0.3
internal-slot: 1.0.5
is-array-buffer: 3.0.2
@ -13987,7 +13988,7 @@ packages:
is-string: 1.0.7
is-typed-array: 1.1.10
is-weakref: 1.0.2
object-inspect: 1.12.3
object-inspect: 1.13.1
object-keys: 1.1.1
object.assign: 4.1.5
regexp.prototype.flags: 1.5.0
@ -14077,8 +14078,8 @@ packages:
/es-get-iterator@1.1.3:
resolution: {integrity: sha512-sPZmqHBe6JIiTfN5q2pEi//TwxmAFHwj/XEuYjTuse78i8KxaqMTTzxPoFKuzRpDpTJ+0NAbpfenkmH2rePtuw==}
dependencies:
call-bind: 1.0.2
get-intrinsic: 1.2.1
call-bind: 1.0.7
get-intrinsic: 1.2.4
has-symbols: 1.0.3
is-arguments: 1.1.1
is-map: 2.0.2
@ -14785,12 +14786,12 @@ packages:
resolution: {integrity: sha512-4EMSHGOPSwAfBiibw3ndnP0AvjDWLsMvGOvWEZ2F96IGk0bIVdjQisOHxReSkE13mHcfbuCiXw+G4y0zv6N8Eg==}
dev: false
/express-async-errors@3.1.1(express@4.18.3):
/express-async-errors@3.1.1(express@4.19.2):
resolution: {integrity: sha512-h6aK1da4tpqWSbyCa3FxB/V6Ehd4EEB15zyQq9qe75OZBp0krinNKuH4rAY+S/U/2I36vdLAUFSjQJ+TFmODng==}
peerDependencies:
express: ^4.16.2
dependencies:
express: 4.18.3
express: 4.19.2
dev: false
/express-handlebars@7.1.2:
@ -14831,25 +14832,25 @@ packages:
url-value-parser: 2.2.0
dev: false
/express-rate-limit@7.2.0(express@4.18.3):
/express-rate-limit@7.2.0(express@4.19.2):
resolution: {integrity: sha512-T7nul1t4TNyfZMJ7pKRKkdeVJWa2CqB8NA1P8BwYaoDI5QSBZARv5oMS43J7b7I5P+4asjVXjb7ONuwDKucahg==}
engines: {node: '>= 16'}
peerDependencies:
express: 4 || 5 || ^5.0.0-beta.1
dependencies:
express: 4.18.3
express: 4.19.2
dev: false
/express@4.18.3:
resolution: {integrity: sha512-6VyCijWQ+9O7WuVMTRBTl+cjNNIzD5cY5mQ1WM8r/LEkI2u8EYpOotESNwzNlyCn3g+dmjKYI6BmNneSr/FSRw==}
/express@4.19.2:
resolution: {integrity: sha512-5T6nhjsT+EOMzuck8JjBHARTHfMht0POzlA60WV2pMD3gyXw2LZnZ+ueGdNxG+0calOJcWKbpFcuzLZ91YWq9Q==}
engines: {node: '>= 0.10.0'}
dependencies:
accepts: 1.3.8
array-flatten: 1.1.1
body-parser: 1.20.2
content-disposition: 0.5.4
content-type: 1.0.4
cookie: 0.5.0
content-type: 1.0.5
cookie: 0.6.0
cookie-signature: 1.0.6
debug: 2.6.9
depd: 2.0.0
@ -16029,11 +16030,6 @@ packages:
resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==}
engines: {node: '>=8'}
/has-property-descriptors@1.0.0:
resolution: {integrity: sha512-62DVLZGoiEBDHQyqG4w9xCuZ7eJEwNmJRWw2VY84Oedb7WFcA27fiEVe8oUQx9hAUJ4ekurquucTGwsyO1XGdQ==}
dependencies:
get-intrinsic: 1.2.4
/has-property-descriptors@1.0.2:
resolution: {integrity: sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg==}
dependencies:
@ -16590,14 +16586,14 @@ packages:
resolution: {integrity: sha512-8Q7EARjzEnKpt/PCD7e1cgUS0a6X8u5tdSiMqXhojOdoV9TsMsiO+9VLC5vAmO8N7/GmXn7yjR8qnA6bVAEzfA==}
engines: {node: '>= 0.4'}
dependencies:
call-bind: 1.0.2
call-bind: 1.0.7
has-tostringtag: 1.0.0
/is-array-buffer@3.0.2:
resolution: {integrity: sha512-y+FyyR/w8vfIRq4eQcM1EYgSTnmHXPqaF+IgzgraytCFq5Xh8lllDVmAZolPJiZttZLeFSINPYMaEJ7/vWUa1w==}
dependencies:
call-bind: 1.0.2
get-intrinsic: 1.2.1
call-bind: 1.0.7
get-intrinsic: 1.2.4
is-typed-array: 1.1.10
/is-array-buffer@3.0.4:
@ -16884,7 +16880,7 @@ packages:
resolution: {integrity: sha512-kvRdxDsxZjhzUX07ZnLydzS1TU/TJlTUHHY4YLL87e37oUA49DfkLqgy+VjFocowy29cKvcSiu+kIv728jTTVg==}
engines: {node: '>= 0.4'}
dependencies:
call-bind: 1.0.2
call-bind: 1.0.7
has-tostringtag: 1.0.0
/is-relative@1.0.0:
@ -16905,7 +16901,7 @@ packages:
/is-shared-array-buffer@1.0.2:
resolution: {integrity: sha512-sqN2UDu1/0y6uvXyStCOzyhAjCSlHceFoMKJW8W9EU9cvic/QdsZ0kEU93HEy3IUEFZIiH/3w+AH/UQbPHNdhA==}
dependencies:
call-bind: 1.0.2
call-bind: 1.0.7
/is-shared-array-buffer@1.0.3:
resolution: {integrity: sha512-nA2hv5XIhLR3uVzDDfCIknerhx8XUKnstuOERPNNIinXG7v9u+ohXF67vxm4TPTEPU6lm61ZkwP3c9PCB97rhg==}
@ -20381,7 +20377,7 @@ packages:
resolution: {integrity: sha512-3cyDsyHgtmi7I7DfSSI2LDp6SK2lwvtbg0p0R1e0RvTqF5ceGx+K2dfSjm1bKDMVCFEDAQvy+o8c6a7VujOddw==}
engines: {node: '>= 0.4'}
dependencies:
call-bind: 1.0.2
call-bind: 1.0.7
define-properties: 1.2.0
/object-keys@1.1.1:
@ -20404,7 +20400,7 @@ packages:
resolution: {integrity: sha512-1mxKf0e58bvyjSCtKYY4sRe9itRk3PJpquJOjeIkz885CczcI4IvJJDLPS72oowuSh+pBxUFROpX+TU++hxhZQ==}
engines: {node: '>= 0.4'}
dependencies:
call-bind: 1.0.2
call-bind: 1.0.7
define-properties: 1.2.0
has-symbols: 1.0.3
object-keys: 1.1.1
@ -22453,7 +22449,7 @@ packages:
resolution: {integrity: sha512-0SutC3pNudRKgquxGoRGIz946MZVHqbNfPjBdxeOhBrdgDKlRoXmYLQN9xRbrR09ZXWeGAdPuif7egofn6v5LA==}
engines: {node: '>= 0.4'}
dependencies:
call-bind: 1.0.2
call-bind: 1.0.7
define-properties: 1.2.0
functions-have-names: 1.2.3
@ -24067,13 +24063,13 @@ packages:
resolution: {integrity: sha512-j0PIATqQSEFGOLmiJOJZj1X1Jt6bFIur3JpY7+ghliUnfZs0fpWDdHEkn9q7QUlBtKbkn6TepvSxTqnE8l3s0A==}
dev: false
/swagger-ui-express@5.0.0(express@4.18.3):
/swagger-ui-express@5.0.0(express@4.19.2):
resolution: {integrity: sha512-tsU9tODVvhyfkNSvf03E6FAk+z+5cU3lXAzMy6Pv4av2Gt2xA0++fogwC4qo19XuFf6hdxevPuVCSKFuMHJhFA==}
engines: {node: '>= v0.10.32'}
peerDependencies:
express: '>=4.0.0 || >=5.0.0-beta'
dependencies:
express: 4.18.3
express: 4.19.2
swagger-ui-dist: 5.11.0
dev: false
@ -26067,7 +26063,7 @@ packages:
engines: {node: '>= 0.4'}
dependencies:
available-typed-arrays: 1.0.5
call-bind: 1.0.2
call-bind: 1.0.7
for-each: 0.3.3
gopd: 1.0.1
has-tostringtag: 1.0.0