diff --git a/CHANGELOG.md b/CHANGELOG.md index 3e47a5e2a..77850283e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,7 @@ - Fix a bug: wrong reservations count for spaces in availabilities export (#415) - Fix a security issue: updated express to 4.18.2 to fix [CVE-2022-24999](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24999) +- Fix a security issue: updated @claviska/jquery-minicolors to 2.3.6 to fix [CVE-2021-4243](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4243) ## v5.5.7 2022 December 13 diff --git a/package.json b/package.json index 830eda460..99a81558b 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "@babel/preset-react": "^7.12.1", "@babel/preset-typescript": "^7.16.7", "@babel/runtime": "^7.17.2", - "@claviska/jquery-minicolors": "^2.3.5", + "@claviska/jquery-minicolors": "^2.3.6", "@dnd-kit/core": "^6.0.5", "@dnd-kit/modifiers": "^6.0.0", "@dnd-kit/sortable": "^7.0.1", diff --git a/yarn.lock b/yarn.lock index 36a210783..d56f36709 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1478,10 +1478,10 @@ "@babel/helper-validator-identifier" "^7.14.5" to-fast-properties "^2.0.0" -"@claviska/jquery-minicolors@^2.3.5": - version "2.3.5" - resolved "https://registry.yarnpkg.com/@claviska/jquery-minicolors/-/jquery-minicolors-2.3.5.tgz#b802fcf2a7b75f169e68a7321d8a8d03f9fcd17c" - integrity sha512-LpiN8hyqRPYB2tEzFD4lI54GxKHQXhzrJMnKnsumElYxjkjbdAPmiIm+1k/Mkfn92HepL7t9uaK5iQSFP/19aw== +"@claviska/jquery-minicolors@^2.3.6": + version "2.3.6" + resolved "https://registry.yarnpkg.com/@claviska/jquery-minicolors/-/jquery-minicolors-2.3.6.tgz#0f3dfe9baf11e93a3b1b1dcf2448177cf4c32e3e" + integrity sha512-8Ro6D4GCrmOl41+6w4NFhEOpx8vjxwVRI69bulXsFDt49uVRKhLU5TnzEV7AmOJrylkVq+ugnYNMiGHBieeKUQ== "@discoveryjs/json-ext@^0.5.0": version "0.5.6"