Skip to content

Commit 67ca636

Browse files
Tushar Sabalemeta-codesync[bot]
authored andcommitted
Upgrade dom-iterator from 1.0.0 to 1.0.2
Summary: The 3P Library Vulnerability Remediation Team is dedicated to remediating high-risk external libraries at Meta using both manual and automated processes. Older versions of this library have been identified as risky, and this diff stack is intended to upgrade the library to a recommended version. We kindly request your help with the diff review. Please commandeer this diff stack if specific merges need to be added or if there are any build or dependency failures. Asset Name: asset://code.third_party_library/fbsource/fbobjc%2FLibraries%2FMobileUI%2FQuickLayout%2Fdocs%2Fyarn.lock%23pkg:npm%2Fdom-iterator@1.0.0 Asset Version: 1.0.0 Asset Vulnerabilities: CVE-2024-21541, CWEs: Improper Control of Generation of Code ('Code Injection') Version to upgrade to: 1.0.1 Additional Info: This diff contains updated yarn files and changes to update vulnerable package. As a part of this diff performed below steps update resolutions section with recommended version run yarn install revert changes in resolutions section run yarn install Reviewed By: ide-2 Differential Revision: D87274669 fbshipit-source-id: ed5fff58404052f259cedddb9a9b8f09b158aa5f
1 parent 47ffabd commit 67ca636

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

Sources/QuickLayout/docs/yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6137,9 +6137,9 @@ dom-converter@^0.2.0:
61376137
utila "~0.4"
61386138

61396139
dom-iterator@^1.0.0:
6140-
version "1.0.0"
6141-
resolved "https://registry.yarnpkg.com/dom-iterator/-/dom-iterator-1.0.0.tgz#9c09899846ec41c2d257adc4d6015e4759ef05ad"
6142-
integrity sha512-7dsMOQI07EMU98gQM8NSB3GsAiIeBYIPKpnxR3c9xOvdvBjChAcOM0iJ222I3p5xyiZO9e5oggkNaCusuTdYig==
6140+
version "1.0.2"
6141+
resolved "https://registry.yarnpkg.com/dom-iterator/-/dom-iterator-1.0.2.tgz#6b239349ccadbd595055da5e0a7386cce9f0aa7b"
6142+
integrity sha512-BMelEjhy08OpoWF3v/jrPtx7PZCyP1VM9yiB7rJk19UVmt7zTN5rqoC0Jea+EyT0M6v/VokL0LxIlGLUOBJZ2g==
61436143
dependencies:
61446144
component-props "1.1.1"
61456145
component-xor "0.0.4"

0 commit comments

Comments
 (0)