ajv-validator/ajv-merge-patch

Potential security issue caused by `fast-json-patch`

willdurand opened this issue · 5 comments

willdurand commented

See: GHSA-8gh8-hqwg-xf34

@epoberezkin would it be possible to upgrade fast-json-patch to 3.1.1 by chance?

yaverin commented

@epoberezkin , please take a look and let us know.

  • 👍3
krcummings1 commented

@epoberezkin please approve the related PR for this issue.

Scott-Allen-Mind-Gyn commented

Hey coming across this issue also, any update - seems to have sat for a few weeks. :)

matei4adrian commented

Any update on this?

  • 👍9
ZackPoormanCalder commented

It's been 5 months since the last comment here and over a year since this was opened. Any maintainer updates?

  • 👍1