chore(deps): bump jsonpath-plus to ^10.0.0 to mitigate CVE-2024-21534 (…

…#1058) * chore(deps): update dependency jsonpath-plus to 10.0.0 due to vulnerability Signed-off-by: Nowacki, Kacper <[email protected]> * adding changeset --------- Signed-off-by: Nowacki, Kacper <[email protected]> Co-authored-by: knowacki23 <[email protected]>
asyncapi · Oct 28, 2024 · e18f865 · e18f865
1 parent dd8c9e8
commit e18f865
Show file tree

Hide file tree

Showing 3 changed files with 39 additions and 3 deletions.
diff --git a/.changeset/new-ears-clap.md b/.changeset/new-ears-clap.md
@@ -0,0 +1,6 @@
+---
+"@asyncapi/multi-parser": minor
+"@asyncapi/parser": minor
+---
+
+Updating jsonpath-plus dependency to mitigate CVE-2024-21534
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/parser/package.json b/packages/parser/package.json
@@ -59,7 +59,7 @@
     "ajv-formats": "^2.1.1",
     "avsc": "^5.7.5",
     "js-yaml": "^4.1.0",
-    "jsonpath-plus": "^7.2.0",
+    "jsonpath-plus": "^10.0.0",
     "node-fetch": "2.6.7"
   },
   "devDependencies": {