update express to fix xss
Signed-off-by: si458 <simonsmith5521@gmail.com>
si458 committed
Oct 12, 2024 at 00:12 UTC
6dbc6d2d07f061bcafe731e8f68b24bd40b15738
4 files changed
+13
-13
dependencies.txt
+1
-1
@@ -4,7 +4,7 @@
4
"cbor": "5.2.0",
5
"compression": "1.7.4",
6
"cookie-session": "2.0.0",
7
- "express": "4.21.0",
7
+ "express": "4.21.1",
8
"express-handlebars": "7.1.3",
9
"express-ws": "5.0.2",
10
"ipcheck": "0.1.0",
meshcentral.js
+1
-1
@@ -4207,7 +4207,7 @@ function mainStart() {
4207
4208
// Build the list of required modules
4209
// NOTE: ALL MODULES MUST HAVE A VERSION NUMBER AND THE VERSION MUST MATCH THAT USED IN Dockerfile
4210
- var modules = ['archiver@7.0.1', 'body-parser@1.20.3', 'cbor@5.2.0', 'compression@1.7.4', 'cookie-session@2.0.0', 'express@4.21.0', 'express-handlebars@7.1.3', 'express-ws@5.0.2', 'ipcheck@0.1.0', 'minimist@1.2.8', 'multiparty@4.2.3', '@yetzt/nedb', 'node-forge@1.3.1', 'ua-parser-js@1.0.37', 'ws@8.17.1', 'yauzl@2.10.0'];
4210
+ var modules = ['archiver@7.0.1', 'body-parser@1.20.3', 'cbor@5.2.0', 'compression@1.7.4', 'cookie-session@2.0.0', 'express@4.21.1', 'express-handlebars@7.1.3', 'express-ws@5.0.2', 'ipcheck@0.1.0', 'minimist@1.2.8', 'multiparty@4.2.3', '@yetzt/nedb', 'node-forge@1.3.1', 'ua-parser-js@1.0.37', 'ws@8.17.1', 'yauzl@2.10.0'];
4211
if (require('os').platform() == 'win32') { modules.push('node-windows@0.1.14'); modules.push('loadavg-windows@1.1.1'); if (sspi == true) { modules.push('node-sspi@0.2.10'); } } // Add Windows modules
4212
if (ldap == true) { modules.push('ldapauth-fork@5.0.5'); }
4213
if (ssh == true) { modules.push('ssh2@1.15.0'); }
package-lock.json
+10
-10
@@ -1,12 +1,12 @@
1
{
2
"name": "meshcentral",
3
- "version": "1.1.31",
3
+ "version": "1.1.32",
4
"lockfileVersion": 3,
5
"requires": true,
6
"packages": {
7
"": {
8
"name": "meshcentral",
9
- "version": "1.1.31",
9
+ "version": "1.1.32",
10
"license": "Apache-2.0",
11
"dependencies": {
12
"@yetzt/nedb": "1.8.0",
@@ -15,7 +15,7 @@
15
"cbor": "5.2.0",
16
"compression": "1.7.4",
17
"cookie-session": "2.0.0",
18
- "express": "4.21.0",
18
+ "express": "4.21.1",
19
"express-handlebars": "7.1.3",
20
"express-ws": "5.0.2",
21
"ipcheck": "0.1.0",
@@ -413,9 +413,9 @@
413
}
414
},
415
"node_modules/cookie": {
416
- "version": "0.6.0",
417
- "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.6.0.tgz",
418
- "integrity": "sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==",
416
+ "version": "0.7.1",
417
+ "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
418
+ "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==",
419
"engines": {
420
"node": ">= 0.6"
421
}
@@ -637,16 +637,16 @@
637
}
638
},
639
"node_modules/express": {
640
- "version": "4.21.0",
641
- "resolved": "https://registry.npmjs.org/express/-/express-4.21.0.tgz",
642
- "integrity": "sha512-VqcNGcj/Id5ZT1LZ/cfihi3ttTn+NJmkli2eZADigjq29qTlWi/hAQ43t/VLPq8+UX06FCEx3ByOYet6ZFblng==",
640
+ "version": "4.21.1",
641
+ "resolved": "https://registry.npmjs.org/express/-/express-4.21.1.tgz",
642
+ "integrity": "sha512-YSFlK1Ee0/GC8QaO91tHcDxJiE/X4FbpAyQWkxAvG6AXCuR65YzK8ua6D9hvi/TzUfZMpc+BwuM1IPw8fmQBiQ==",
643
"dependencies": {
644
"accepts": "~1.3.8",
645
"array-flatten": "1.1.1",
646
"body-parser": "1.20.3",
647
"content-disposition": "0.5.4",
648
"content-type": "~1.0.4",
649
- "cookie": "0.6.0",
649
+ "cookie": "0.7.1",
650
"cookie-signature": "1.0.6",
651
"debug": "2.6.9",
652
"depd": "2.0.0",
package.json
+1
-1
@@ -43,7 +43,7 @@
43
"cbor": "5.2.0",
44
"compression": "1.7.4",
45
"cookie-session": "2.0.0",
46
- "express": "4.21.0",
46
+ "express": "4.21.1",
47
"express-handlebars": "7.1.3",
48
"express-ws": "5.0.2",
49
"ipcheck": "0.1.0",