Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: security vulnerability that allows remote code execution (ghsa p6h4 93qp jhcm) #7841

Merged

Conversation

mtrezza
Copy link
Member

@mtrezza mtrezza commented Mar 11, 2022

This is a security fix for GHSA-p6h4-93qp-jhcm.

@parse-github-assistant
Copy link

parse-github-assistant bot commented Mar 11, 2022

Thanks for opening this pull request!

  • ❌ Please edit your post and use the provided template when creating a new pull request. This helps everyone to understand your post better and asks for essential information to quicker review the pull request.

@mtrezza mtrezza changed the base branch from alpha to release-4.x.x March 11, 2022 21:39
@mtrezza mtrezza closed this Mar 11, 2022
@mtrezza mtrezza reopened this Mar 11, 2022
@mtrezza mtrezza changed the title Fix ghsa p6h4 93qp jhcm fix: ghsa p6h4 93qp jhcm Mar 11, 2022
@codecov
Copy link

codecov bot commented Mar 11, 2022

Codecov Report

❗ No coverage uploaded for pull request base (release-4.x.x@318c203). Click here to learn what that means.
The diff coverage is n/a.

Impacted file tree graph

@@               Coverage Diff                @@
##             release-4.x.x    #7841   +/-   ##
================================================
  Coverage                 ?   93.85%           
================================================
  Files                    ?      170           
  Lines                    ?    12473           
  Branches                 ?        0           
================================================
  Hits                     ?    11706           
  Misses                   ?      767           
  Partials                 ?        0           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 318c203...4e0f03d. Read the comment docs.

@mtrezza mtrezza changed the title fix: ghsa p6h4 93qp jhcm fix: security vulnerability that allows remote code execution (ghsa p6h4 93qp jhcm) Mar 11, 2022
@mtrezza mtrezza merged commit 886bfd7 into parse-community:release-4.x.x Mar 11, 2022
parseplatformorg pushed a commit that referenced this pull request Mar 11, 2022
## [4.10.7](4.10.6...4.10.7) (2022-03-11)

### Bug Fixes

* security vulnerability that allows remote code execution (ghsa p6h4 93qp jhcm) ([#7841](#7841)) ([886bfd7](886bfd7))
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 4.10.7

@parseplatformorg parseplatformorg added the state:released-4.x.x Released as LTS version label Mar 11, 2022
@parse-github-assistant
Copy link

The label state:released-4.x.x cannot be used here.

@parse-github-assistant parse-github-assistant bot removed the state:released-4.x.x Released as LTS version label Mar 11, 2022
@mtrezza mtrezza deleted the fix-GHSA-p6h4-93qp-jhcm branch March 12, 2022 15:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants