admin/n8n-enterprise-unlocked
1
0
Fork 0
mirror of https://github.com/Abdulazizzn/n8n-enterprise-unlocked.git synced 2025-12-16 17:46:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: Upgrade express-openapi-validator to address CVE-2025-47935 and CVE-2025-47944 (#15770)

Browse Source
This commit is contained in:
कारतोफ्फेलस्क्रिप्ट™
2025-06-02 15:12:45 +02:00
committed by GitHub
parent 31b6f32a36
commit d9ee31d79b
2 changed files with 50 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
packages/cli/package.json
View File

@@ -125,7 +125,7 @@
"dotenv": "8.6.0",
"express": "5.1.0",
"express-handlebars": "8.0.1",
"express-openapi-validator": "5.4.7",
"express-openapi-validator": "5.5.3",
"express-prom-bundle": "8.0.0",
"express-rate-limit": "7.5.0",
"fast-glob": "catalog:",

93
pnpm-lock.yaml generated
View File

@@ -750,7 +750,7 @@ importers:
version: 4.3.0
'@getzep/zep-cloud':
specifier: 1.0.12
version: 1.0.12(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(a9c8f655d0ec4bd70e0f938ef73f85da))
version: 1.0.12(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(d71d1df33a22803bba4e47303d410a51))
'@getzep/zep-js':
specifier: 0.9.0
version: 0.9.0
@@ -777,7 +777,7 @@ importers:
version: 0.3.2(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)
'@langchain/community':
specifier: 'catalog:'
version: 0.3.24(90a94ff6ee073f963f6e65dd73dfbb27)
version: 0.3.24(9b62d544268bf8b21f905847a18f95f1)
'@langchain/core':
specifier: 'catalog:'
version: 0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))
@@ -882,7 +882,7 @@ importers:
version: 23.0.1
langchain:
specifier: 0.3.11
version: 0.3.11(a9c8f655d0ec4bd70e0f938ef73f85da)
version: 0.3.11(d71d1df33a22803bba4e47303d410a51)
lodash:
specifier: 'catalog:'
version: 4.17.21
@@ -1222,8 +1222,8 @@ importers:
specifier: 8.0.1
version: 8.0.1
express-openapi-validator:
specifier: 5.4.7
version: 5.4.7(express@5.1.0)
specifier: 5.5.3
version: 5.5.3(express@5.1.0)
express-prom-bundle:
specifier: 8.0.0
version: 8.0.0(prom-client@15.1.3)
@@ -2760,8 +2760,8 @@ packages:
'@anthropic-ai/sdk@0.32.1':
resolution: {integrity: sha512-U9JwTrDvdQ9iWuABVsMLj8nJVwAyQz6QXvgLsVhryhCEPkLsbcP/MXxm+jYcAwLoV8ESbaTTjnD4kuAFa+Hyjg==}
'@apidevtools/json-schema-ref-parser@11.9.3':
resolution: {integrity: sha512-60vepv88RwcJtSHrD6MjIL6Ta3SOYbgfnkHb+ppAVK+o9mXprRtulx7VlRl3lN3bbvysAfCS7WMVfhUYemB0IQ==}
'@apidevtools/json-schema-ref-parser@12.0.2':
resolution: {integrity: sha512-SoZWqQz4YMKdw4kEMfG5w6QAy+rntjsoAT1FtvZAnVEnCR4uy9YSuDBNoVAFHgzSz0dJbISLLCSrGR2Zd7bcvA==}
engines: {node: '>= 16'}
'@authenio/xml-encryption@2.0.2':
@@ -7138,14 +7138,6 @@ packages:
ajv:
optional: true
ajv-formats@2.1.1:
resolution: {integrity: sha512-Wx0Kx52hxE7C18hkMEggYlEifqWZtYaRgouJor+WMdPnQyEK13vgEWyVNup7SoeeoLMsr4kf5h6dOW11I15MUA==}
peerDependencies:
ajv: ^8.0.0
peerDependenciesMeta:
ajv:
optional: true
ajv-formats@3.0.1:
resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
peerDependencies:
@@ -8990,8 +8982,8 @@ packages:
resolution: {integrity: sha512-mdas0PTbgQnwSyAjcYM7OMaftM8nJ3Kqz6yAyK4iCFvMOGGvh6pv42IHwcE5PBpS6ffYeZRSsgAdYUMG4CSjhQ==}
engines: {node: '>=20'}
express-openapi-validator@5.4.7:
resolution: {integrity: sha512-hg1o3+vtsRDLsdBlKBp1Zgyk4WxMtdVwGJGruEj53UIcOiMDgny/diHJmg/MLwPC2OpxLpOCTRFidlVSNAsLPg==}
express-openapi-validator@5.5.3:
resolution: {integrity: sha512-G3PxXXE8Y3aZ2s1OW9k79lyqmNWmj8/QWNWqF9qVPjJ8YON8JQ39c4CgSXemPfbRCuD58ynoHrG3WCetU937dg==}
peerDependencies:
express: '*'
@@ -11209,9 +11201,9 @@ packages:
muggle-string@0.4.1:
resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==}
multer@1.4.5-lts.1:
resolution: {integrity: sha512-ywPWvcDMeH+z9gQq5qYHCCy+ethsk4goepZ45GLD63fOu0YcNecQxi64nDs3qluZB+murG3/D4dJ7+dGctcCQQ==}
engines: {node: '>= 6.0.0'}
multer@2.0.0:
resolution: {integrity: sha512-bS8rPZurbAuHGAnApbM9d4h1wSoYqrOqkE+6a64KLMK9yWU7gJXBDDVklKQ3TPi9DRb85cRs6yXaC0+cjxRtRg==}
engines: {node: '>= 10.16.0'}
mustache@4.2.0:
resolution: {integrity: sha512-71ippSywq5Yb7/tVYyGbkBggbU8H3u5Rz56fH60jGFgr8uHwxs+aSKeqmluIVzM0m0kB7xQjKS6qPfd0b2ZoqQ==}
@@ -14447,7 +14439,7 @@ snapshots:
transitivePeerDependencies:
- encoding
'@apidevtools/json-schema-ref-parser@11.9.3':
'@apidevtools/json-schema-ref-parser@12.0.2':
dependencies:
'@jsdevtools/ono': 7.1.3
'@types/json-schema': 7.0.15
@@ -16632,7 +16624,7 @@ snapshots:
'@gar/promisify@1.1.3':
optional: true
'@getzep/zep-cloud@1.0.12(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(a9c8f655d0ec4bd70e0f938ef73f85da))':
'@getzep/zep-cloud@1.0.12(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(d71d1df33a22803bba4e47303d410a51))':
dependencies:
form-data: 4.0.0
node-fetch: 2.7.0(encoding@0.1.13)
@@ -16641,7 +16633,7 @@ snapshots:
zod: 3.24.1
optionalDependencies:
'@langchain/core': 0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))
langchain: 0.3.11(a9c8f655d0ec4bd70e0f938ef73f85da)
langchain: 0.3.11(d71d1df33a22803bba4e47303d410a51)
transitivePeerDependencies:
- encoding
@@ -17163,7 +17155,7 @@ snapshots:
- aws-crt
- encoding
'@langchain/community@0.3.24(90a94ff6ee073f963f6e65dd73dfbb27)':
'@langchain/community@0.3.24(9b62d544268bf8b21f905847a18f95f1)':
dependencies:
'@browserbasehq/stagehand': 1.9.0(@playwright/test@1.49.1)(deepmerge@4.3.1)(dotenv@16.5.0)(encoding@0.1.13)(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))(zod@3.24.1)
'@ibm-cloud/watsonx-ai': 1.1.2
@@ -17174,7 +17166,7 @@ snapshots:
flat: 5.0.2
ibm-cloud-sdk-core: 5.3.2
js-yaml: 4.1.0
langchain: 0.3.11(a9c8f655d0ec4bd70e0f938ef73f85da)
langchain: 0.3.11(d71d1df33a22803bba4e47303d410a51)
langsmith: 0.2.15(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))
openai: 4.78.1(encoding@0.1.13)(zod@3.24.1)
uuid: 10.0.0
@@ -17189,7 +17181,7 @@ snapshots:
'@aws-sdk/credential-provider-node': 3.808.0
'@azure/storage-blob': 12.26.0
'@browserbasehq/sdk': 2.6.0(encoding@0.1.13)
'@getzep/zep-cloud': 1.0.12(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(a9c8f655d0ec4bd70e0f938ef73f85da))
'@getzep/zep-cloud': 1.0.12(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(d71d1df33a22803bba4e47303d410a51))
'@getzep/zep-js': 0.9.0
'@google-ai/generativelanguage': 2.6.0(encoding@0.1.13)
'@google-cloud/storage': 7.12.1(encoding@0.1.13)
@@ -20345,14 +20337,14 @@ snapshots:
optionalDependencies:
ajv: 8.17.1
ajv-formats@2.1.1(ajv@8.17.1):
optionalDependencies:
ajv: 8.17.1
ajv-formats@3.0.1(ajv@8.13.0):
optionalDependencies:
ajv: 8.13.0
ajv-formats@3.0.1(ajv@8.17.1):
optionalDependencies:
ajv: 8.17.1
ajv@6.12.6:
dependencies:
fast-deep-equal: 3.1.3
@@ -20638,6 +20630,14 @@ snapshots:
transitivePeerDependencies:
- debug
axios@1.9.0:
dependencies:
follow-redirects: 1.15.9(debug@4.3.6)
form-data: 4.0.2
proxy-from-env: 1.1.0
transitivePeerDependencies:
- debug
axios@1.9.0(debug@4.3.6):
dependencies:
follow-redirects: 1.15.9(debug@4.3.6)
@@ -20656,7 +20656,7 @@ snapshots:
axios@1.9.0(debug@4.4.1):
dependencies:
follow-redirects: 1.15.9(debug@4.3.6)
follow-redirects: 1.15.9(debug@4.4.1)
form-data: 4.0.2
proxy-from-env: 1.1.0
transitivePeerDependencies:
@@ -22584,22 +22584,23 @@ snapshots:
graceful-fs: 4.2.11
handlebars: 4.7.8
express-openapi-validator@5.4.7(express@5.1.0):
express-openapi-validator@5.5.3(express@5.1.0):
dependencies:
'@apidevtools/json-schema-ref-parser': 11.9.3
'@apidevtools/json-schema-ref-parser': 12.0.2
'@types/multer': 1.4.12
ajv: 8.17.1
ajv-draft-04: 1.0.0(ajv@8.17.1)
ajv-formats: 2.1.1(ajv@8.17.1)
ajv-formats: 3.0.1(ajv@8.17.1)
content-type: 1.0.5
express: 5.1.0
json-schema-traverse: 1.0.0
lodash.clonedeep: 4.5.0
lodash.get: 4.4.2
media-typer: 1.1.0
multer: 1.4.5-lts.1
multer: 2.0.0
ono: 7.1.3
path-to-regexp: 8.2.0
qs: 6.14.0
express-prom-bundle@8.0.0(prom-client@15.1.3):
dependencies:
@@ -22827,6 +22828,10 @@ snapshots:
optionalDependencies:
debug: 4.4.0(supports-color@8.1.1)
follow-redirects@1.15.9(debug@4.4.1):
optionalDependencies:
debug: 4.4.1
for-each@0.3.3:
dependencies:
is-callable: 1.2.7
@@ -23452,7 +23457,7 @@ snapshots:
isstream: 0.1.2
jsonwebtoken: 9.0.2
mime-types: 2.1.35
retry-axios: 2.6.0(axios@1.9.0(debug@4.4.1))
retry-axios: 2.6.0(axios@1.9.0)
tough-cookie: 4.1.4
transitivePeerDependencies:
- supports-color
@@ -23517,7 +23522,7 @@ snapshots:
infisical-node@1.3.0:
dependencies:
axios: 1.9.0(debug@4.4.1)
axios: 1.9.0
dotenv: 16.3.1
tweetnacl: 1.0.3
tweetnacl-util: 0.15.1
@@ -24477,7 +24482,7 @@ snapshots:
kuler@2.0.0: {}
langchain@0.3.11(a9c8f655d0ec4bd70e0f938ef73f85da):
langchain@0.3.11(d71d1df33a22803bba4e47303d410a51):
dependencies:
'@langchain/core': 0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))
'@langchain/openai': 0.3.17(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)
@@ -24501,7 +24506,7 @@ snapshots:
'@langchain/groq': 0.1.3(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)
'@langchain/mistralai': 0.2.0(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))
'@langchain/ollama': 0.1.4(@langchain/core@0.3.39(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))
axios: 1.9.0(debug@4.4.1)
axios: 1.9.0
cheerio: 1.0.0
handlebars: 4.7.8
transitivePeerDependencies:
@@ -25481,7 +25486,7 @@ snapshots:
muggle-string@0.4.1: {}
multer@1.4.5-lts.1:
multer@2.0.0:
dependencies:
append-field: 1.0.0
busboy: 1.6.0
@@ -26290,7 +26295,7 @@ snapshots:
posthog-node@3.2.1:
dependencies:
axios: 1.9.0(debug@4.4.1)
axios: 1.9.0
rusha: 0.8.14
transitivePeerDependencies:
- debug
@@ -26861,9 +26866,9 @@ snapshots:
onetime: 5.1.2
signal-exit: 3.0.7
retry-axios@2.6.0(axios@1.9.0(debug@4.4.1)):
retry-axios@2.6.0(axios@1.9.0):
dependencies:
axios: 1.9.0(debug@4.4.1)
axios: 1.9.0
retry-request@7.0.2(encoding@0.1.13):
dependencies:
@@ -27323,7 +27328,7 @@ snapshots:
asn1.js: 5.4.1
asn1.js-rfc2560: 5.0.1(asn1.js@5.4.1)
asn1.js-rfc5280: 3.0.0
axios: 1.9.0(debug@4.4.1)
axios: 1.9.0
big-integer: 1.6.52
bignumber.js: 9.1.2
binascii: 0.0.2