Skip to content

fix(deps): vuln fast-xml-parser (patch → 5.5.12) #2289

Merged
Drarig29 merged 2 commits into
masterfrom
engraver-auto-version-upgrade/minorpatch/npm/1-1776957983
May 4, 2026
Merged

fix(deps): vuln fast-xml-parser (patch → 5.5.12) #2289
Drarig29 merged 2 commits into
masterfrom
engraver-auto-version-upgrade/minorpatch/npm/1-1776957983

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: Security update — 3 packages upgraded (patch changes only)

Manifests changed:

  • . (yarn)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
fast-xml-parser 5.5.9 5.5.12 patch Direct 1 MODERATE
fast-xml-parser 5.5.9 5.5.12 patch Direct 1 MODERATE
fast-xml-parser 5.5.9 5.5.12 patch Direct 1 MODERATE

Security Details

ℹ️ Other Vulnerabilities (3)
Package CVE Severity Summary Unsafe Version Fixed In
fast-xml-parser GHSA-gh4j-gqv2-49f6 MODERATE fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters 5.5.9 5.7.0
fast-xml-parser GHSA-gh4j-gqv2-49f6 MODERATE fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters 5.5.9 5.7.0
fast-xml-parser GHSA-gh4j-gqv2-49f6 MODERATE fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters 5.5.9 5.7.0

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System

@gh-worker-campaigns-3e9aa4

gh-worker-campaigns-3e9aa4 Bot commented Apr 24, 2026

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with master — rebased onto b704b31.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-019303
dd-octo-sts-019303 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/1-1776957983 branch from ed9d100 to cb002d2 Compare April 24, 2026 14:02
@dd-octo-sts-6bb5b9
dd-octo-sts-6bb5b9 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/1-1776957983 branch from cb002d2 to 00705fe Compare April 27, 2026 15:44
Co-authored-by: dd-octo-sts-6bb5b9[bot] <256648796+dd-octo-sts-6bb5b9[bot]@users.noreply.github.com>
@dd-octo-sts-4caf68
dd-octo-sts-4caf68 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/1-1776957983 branch from 00705fe to 4b152c0 Compare May 1, 2026 17:57
@Drarig29
Drarig29 marked this pull request as ready for review May 4, 2026 12:35
@Drarig29
Drarig29 requested review from a team as code owners May 4, 2026 12:35
@Drarig29
Drarig29 requested a review from juliomalegria-dd May 4, 2026 12:35
@Drarig29
Drarig29 removed the request for review from juliomalegria-dd May 4, 2026 12:52
@Drarig29
Drarig29 merged commit 0661517 into master May 4, 2026
28 checks passed
@Drarig29
Drarig29 deleted the engraver-auto-version-upgrade/minorpatch/npm/1-1776957983 branch May 4, 2026 12:52
@ava-silver ava-silver mentioned this pull request May 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant