From 811ff4bcf4ef7b1c5be91405ebe3ab06290d6ab4 Mon Sep 17 00:00:00 2001 From: Jan Socha <92743635+js0cha@users.noreply.github.com> Date: Thu, 2 Jun 2022 14:45:42 +0200 Subject: [PATCH] chore(deps): upgrade swagger-ui-react to 4.11.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Mitigate the current XSS vulnerabilities (https://www.npmjs.com/advisories/1070339) Signed-off-by: Jan Socha Signed-off-by: Fredrik Adelöw --- .changeset/tender-weeks-help.md | 6 ++++++ plugins/api-docs/package.json | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) create mode 100644 .changeset/tender-weeks-help.md diff --git a/.changeset/tender-weeks-help.md b/.changeset/tender-weeks-help.md new file mode 100644 index 0000000000..7b70a3a925 --- /dev/null +++ b/.changeset/tender-weeks-help.md @@ -0,0 +1,6 @@ +--- +'@backstage/plugin-api-docs': patch +--- + +Updated `swagger-ui-react` to 4.11.1 in order to address a [XSS +vulnerability](https://github.com/advisories/GHSA-hqq7-2q2v-82xq) in `@braintree/sanitize-url` diff --git a/plugins/api-docs/package.json b/plugins/api-docs/package.json index e544c2812e..4878d4d7cd 100644 --- a/plugins/api-docs/package.json +++ b/plugins/api-docs/package.json @@ -50,7 +50,7 @@ "react-router": "6.0.0-beta.0", "react-router-dom": "6.0.0-beta.0", "react-use": "^17.2.4", - "swagger-ui-react": "^4.1.3" + "swagger-ui-react": "^4.11.1" }, "peerDependencies": { "@types/react": "^16.13.1 || ^17.0.0",