diff --git a/package.json b/package.json index 4d876ae..89f6c36 100644 --- a/package.json +++ b/package.json @@ -34,7 +34,7 @@ "date-fns": "^3.6.0", "dotenv": "^16.4.5", "en-pos": "^1.0.16", - "fast-xml-parser": "^4.5.0", + "fast-xml-parser": "^5.3.4", "iconify-icon": "^1.0.8", "localforage": "^1.10.0", "lodash.debounce": "^4.0.8", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 794d54d..02e93d0 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -57,8 +57,8 @@ importers: specifier: ^1.0.16 version: 1.0.16 fast-xml-parser: - specifier: ^4.5.0 - version: 4.5.0 + specifier: ^5.3.4 + version: 5.3.4 iconify-icon: specifier: ^1.0.8 version: 1.0.8 @@ -1662,8 +1662,12 @@ packages: resolution: {integrity: sha512-xkjOecfnKGkSsOwtZ5Pz7Us/T6mrbPQrq0nh+aCO5V9nk5NLWmasAHumTKjiPJPWANe+kAZ84Jc8ooJkzZ88Sw==} hasBin: true - fast-xml-parser@4.5.0: - resolution: {integrity: sha512-/PlTQCI96+fZMAOLMZK4CWG1ItCbfZ/0jx7UIJFChPNrx7tcEgerUgWbeieCM9MfHInUDyK8DWYZ+YrywDJuTg==} + fast-xml-parser@4.5.3: + resolution: {integrity: sha512-RKihhV+SHsIUGXObeVy9AXiBbFwkVk7Syp8XgwN5U3JV416+Gwp/GO9i0JYKmikykgz/UHRrrV4ROuZEo/T0ig==} + hasBin: true + + fast-xml-parser@5.3.4: + resolution: {integrity: sha512-EFd6afGmXlCx8H8WTZHhAoDaWaGyuIBoZJ2mknrNxug+aZKjkp0a0dlars9Izl+jF+7Gu1/5f/2h68cQpe0IiA==} hasBin: true fastq@1.17.1: @@ -2546,6 +2550,7 @@ packages: sitemap@8.0.0: resolution: {integrity: sha512-+AbdxhM9kJsHtruUF39bwS/B0Fytw6Fr1o4ZAIAEqA6cke2xcoO2GleBw9Zw7nRzILVEgz7zBM5GiTJjie1G9A==} engines: {node: '>=14.0.0', npm: '>=6.0.0'} + deprecated: 'SECURITY: Multiple vulnerabilities fixed in 8.0.1 (XML injection, path traversal, command injection, protocol injection). Upgrade immediately: npm install sitemap@8.0.1' hasBin: true solid-js@1.9.3: @@ -2619,8 +2624,11 @@ packages: resolution: {integrity: sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==} engines: {node: '>=0.10.0'} - strnum@1.0.5: - resolution: {integrity: sha512-J8bbNyKKXl5qYcR36TIO8W3mVGVHrmmxsd5PAItGkmyzwJvybiw2IVq5nqd0i4LSNSkB/sx9VHllbfFdr9k1JA==} + strnum@1.1.2: + resolution: {integrity: sha512-vrN+B7DBIoTTZjnPNewwhx6cBA/H+IS7rfW68n7XxC1y7uoiGQBxaKzqucGUgavX15dJgiGztLJ8vxuEzwqBdA==} + + strnum@2.1.2: + resolution: {integrity: sha512-l63NF9y/cLROq/yqKXSLtcMeeyOfnSQlfMSlzFt/K73oIaD8DGaQWd7Z34X9GPiKqP5rbSh84Hl4bOlLcjiSrQ==} style-to-object@0.4.4: resolution: {integrity: sha512-HYNoHZa2GorYNyqiCaBgsxvcJIn7OHq6inEga+E6Ke3m5JkoqpQbnFssk4jwe+K7AhGa2fcha4wSOf1Kn01dMg==} @@ -3191,7 +3199,7 @@ snapshots: '@astrojs/rss@4.0.9': dependencies: - fast-xml-parser: 4.5.0 + fast-xml-parser: 4.5.3 kleur: 4.1.5 '@astrojs/sitemap@3.2.1': @@ -5216,11 +5224,15 @@ snapshots: fast-xml-parser@4.4.1: dependencies: - strnum: 1.0.5 + strnum: 1.1.2 - fast-xml-parser@4.5.0: + fast-xml-parser@4.5.3: dependencies: - strnum: 1.0.5 + strnum: 1.1.2 + + fast-xml-parser@5.3.4: + dependencies: + strnum: 2.1.2 fastq@1.17.1: dependencies: @@ -6644,7 +6656,9 @@ snapshots: strip-json-comments@2.0.1: {} - strnum@1.0.5: {} + strnum@1.1.2: {} + + strnum@2.1.2: {} style-to-object@0.4.4: dependencies: