Merge pull request #812 from telefonicaid/dependabot/npm_and_yarn/nan…

…oid-3.3.8 Bump nanoid from 3.3.4 to 3.3.8
telefonicaid · Dec 11, 2024 · d3dca6b · d3dca6b
2 parents 9aa857e + a318325
commit d3dca6b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/Changelog b/Changelog
@@ -1,3 +1,5 @@
+- Upgrade: nanoid dependency from 3.3.4 to 3.3.8 (solving vulnerability CVE-2024-55565)
+
 1.34.0 (July 30th, 2024)
 
 - Fix: smtpConfig after error in emailAction rule (#798)

diff --git a/package.json b/package.json
@@ -68,7 +68,7 @@
     "nodemailer": "6.9.13",
     "nodemailer-smtp-transport": "~2.7.2",
     "request": "2.88.2",
-    "nanoid": "3.3.4",
+    "nanoid": "3.3.8",
     "smpp": "0.3.1",
     "swagger-jsdoc": "~3.4.0",
     "swagger-ui-express": "~4.1.1",