Elgato_dark/twenty
1
0
Fork 0
mirror of https://github.com/twentyhq/twenty synced 2026-04-21 13:37:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 17

fix: tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball (#15325)

Browse source 
Fixes [Dependabot Alert
281](https://github.com/twentyhq/twenty/security/dependabot/281) and
five other associated alerts.

Used `yarn up tar-fs --recursive` to update the version of tar-fs to
3.1.1.
This commit is contained in:
Abdullah. 2025-10-24 16:15:02 +05:00 committed by GitHub
parent 9294c07c97
commit 5d28b32b8e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 97 additions and 41 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

138
yarn.lock
View file

@ -26548,46 +26548,82 @@ __metadata:
languageName: node
linkType: hard
"bare-events@npm:^2.0.0, bare-events@npm:^2.2.0":
"bare-events@npm:^2.2.0":
version: 2.4.2
resolution: "bare-events@npm:2.4.2"
checksum: 10c0/09fa923061f31f815e83504e2ed4a8ba87732a01db40a7fae703dbb7eef7f05d99264b5e186074cbe9698213990d1af564c62cca07a5ff88baea8099ad9a6303
languageName: node
linkType: hard
"bare-fs@npm:^2.1.1":
"bare-events@npm:^2.5.4, bare-events@npm:^2.7.0":
version: 2.8.1
resolution: "bare-events@npm:2.8.1"
peerDependencies:
bare-abort-controller: "*"
peerDependenciesMeta:
bare-abort-controller:
optional: true
checksum: 10c0/0564f170b60ce827bc115b1c6e32092c7072905c560a941ac26149bbdde672d203897419f53015e0b41a2b3f3332a03dc2c66d3176ceebe1c58f636246f45808
languageName: node
linkType: hard
"bare-fs@npm:^4.0.1":
version: 4.5.0
resolution: "bare-fs@npm:4.5.0"
dependencies:
bare-events: "npm:^2.5.4"
bare-path: "npm:^3.0.0"
bare-stream: "npm:^2.6.4"
bare-url: "npm:^2.2.2"
fast-fifo: "npm:^1.3.2"
peerDependencies:
bare-buffer: "*"
peerDependenciesMeta:
bare-buffer:
optional: true
checksum: 10c0/8092cd3389c4a2ef6bb4b0d5df1112d948d03043e8021cb790cd3bd0a190574322e34170379f0bb16b50b37a88dab0a4aca1c1eb5abb28eee8349fa274a9ed55
languageName: node
linkType: hard
"bare-os@npm:^3.0.1":
version: 3.6.2
resolution: "bare-os@npm:3.6.2"
checksum: 10c0/7d917bc202b7efbb6b78658403fac04ae4e91db98d38cbd24037f896a2b1b4f4571d8cd408d12bed6a4c406d6abaf8d03836eacbcc4c75a0b6974e268574fc5a
languageName: node
linkType: hard
"bare-path@npm:^3.0.0":
version: 3.0.0
resolution: "bare-path@npm:3.0.0"
dependencies:
bare-os: "npm:^3.0.1"
checksum: 10c0/56a3ca82a9f808f4976cb1188640ac206546ce0ddff582afafc7bd2a6a5b31c3bd16422653aec656eeada2830cfbaa433c6cbf6d6b4d9eba033d5e06d60d9a68
languageName: node
linkType: hard
"bare-stream@npm:^2.6.4":
version: 2.7.0
resolution: "bare-stream@npm:2.7.0"
dependencies:
streamx: "npm:^2.21.0"
peerDependencies:
bare-buffer: "*"
bare-events: "*"
peerDependenciesMeta:
bare-buffer:
optional: true
bare-events:
optional: true
checksum: 10c0/3acd840b7b288dc066226c36446ff605fba2ecce98f1a0ce6aa611b81aabbcd204046a3209bce172373d17eaeaa5b7d35a85649c18ffcb9f2c783242854e99bd
languageName: node
linkType: hard
"bare-url@npm:^2.2.2":
version: 2.3.1
resolution: "bare-fs@npm:2.3.1"
resolution: "bare-url@npm:2.3.1"
dependencies:
bare-events: "npm:^2.0.0"
bare-path: "npm:^2.0.0"
bare-stream: "npm:^2.0.0"
checksum: 10c0/820979ad3dd8693076ba08af842e41b5119fcca63f4324b8f28d96b96050cd260085dffd1169dc644f20746fadb4cf4368b317f2fa2db4e40890921ceb557581
languageName: node
linkType: hard
"bare-os@npm:^2.1.0":
version: 2.4.0
resolution: "bare-os@npm:2.4.0"
checksum: 10c0/85615522fd8309d3815d3bef227623f008fac34e037459294a7e24bb2b51ea125597274b8aa7e7038f82de89c15e2148fef299eece40ec3ea33797a357c4f2bb
languageName: node
linkType: hard
"bare-path@npm:^2.0.0, bare-path@npm:^2.1.0":
version: 2.1.3
resolution: "bare-path@npm:2.1.3"
dependencies:
bare-os: "npm:^2.1.0"
checksum: 10c0/35587e177fc8fa5b13fb90bac8779b5ce49c99016d221ddaefe2232d02bd4295d79b941e14ae19fda75ec42a6fe5fb66c07d83ae7ec11462178e66b7be65ca74
languageName: node
linkType: hard
"bare-stream@npm:^2.0.0":
version: 2.1.3
resolution: "bare-stream@npm:2.1.3"
dependencies:
streamx: "npm:^2.18.0"
checksum: 10c0/8703b1d80318496ea560483943d5f425a160ded8d3d75659571842caf5f374f52668809bc1e39b032af14df7210973995efaf273f8c35986bef697380ef4674a
bare-path: "npm:^3.0.0"
checksum: 10c0/aa1313dd49763b8e56d3e3d72d290b79a61d75823a93e22ae176f17b5269469bde06651f26c66de55ab8e5c5cb0896a0890c7fc39b5789a70fb97c87223ee3a5
languageName: node
linkType: hard
@ -32665,6 +32701,15 @@ __metadata:
languageName: node
linkType: hard
"events-universal@npm:^1.0.0":
version: 1.0.1
resolution: "events-universal@npm:1.0.1"
dependencies:
bare-events: "npm:^2.7.0"
checksum: 10c0/a1d9a5e9f95843650f8ec240dd1221454c110189a9813f32cdf7185759b43f1f964367ac7dca4ebc69150b59043f2d77c7e122b0d03abf7c25477ea5494785a5
languageName: node
linkType: hard
"events@npm:^3.0.0, events@npm:^3.2.0, events@npm:^3.3.0":
version: 3.3.0
resolution: "events@npm:3.3.0"
@ -49968,7 +50013,7 @@ __metadata:
languageName: node
linkType: hard
"streamx@npm:^2.15.0, streamx@npm:^2.18.0":
"streamx@npm:^2.15.0":
version: 2.18.0
resolution: "streamx@npm:2.18.0"
dependencies:
@ -49983,6 +50028,17 @@ __metadata:
languageName: node
linkType: hard
"streamx@npm:^2.21.0":
version: 2.23.0
resolution: "streamx@npm:2.23.0"
dependencies:
events-universal: "npm:^1.0.0"
fast-fifo: "npm:^1.3.2"
text-decoder: "npm:^1.1.0"
checksum: 10c0/15708ce37818d588632fe1104e8febde573e33e8c0868bf583fce0703f3faf8d2a063c278e30df2270206811b69997f64eb78792099933a1fe757e786fbcbd44
languageName: node
linkType: hard
"strict-event-emitter@npm:^0.4.3":
version: 0.4.6
resolution: "strict-event-emitter@npm:0.4.6"
@ -50760,23 +50816,23 @@ __metadata:
linkType: hard
"tar-fs@npm:^2.0.0":
version: 2.1.1
resolution: "tar-fs@npm:2.1.1"
version: 2.1.4
resolution: "tar-fs@npm:2.1.4"
dependencies:
chownr: "npm:^1.1.1"
mkdirp-classic: "npm:^0.5.2"
pump: "npm:^3.0.0"
tar-stream: "npm:^2.1.4"
checksum: 10c0/871d26a934bfb7beeae4c4d8a09689f530b565f79bd0cf489823ff0efa3705da01278160da10bb006d1a793fa0425cf316cec029b32a9159eacbeaff4965fb6d
checksum: 10c0/decb25acdc6839182c06ec83cba6136205bda1db984e120c8ffd0d80182bc5baa1d916f9b6c5c663ea3f9975b4dd49e3c6bb7b1707cbcdaba4e76042f43ec84c
languageName: node
linkType: hard
"tar-fs@npm:^3.0.4":
version: 3.0.6
resolution: "tar-fs@npm:3.0.6"
version: 3.1.1
resolution: "tar-fs@npm:3.1.1"
dependencies:
bare-fs: "npm:^2.1.1"
bare-path: "npm:^2.1.0"
bare-fs: "npm:^4.0.1"
bare-path: "npm:^3.0.0"
pump: "npm:^3.0.0"
tar-stream: "npm:^3.1.5"
dependenciesMeta:
@ -50784,7 +50840,7 @@ __metadata:
optional: true
bare-path:
optional: true
checksum: 10c0/207b7c0f193495668bd9dbad09a0108ce4ffcfec5bce2133f90988cdda5c81fad83c99f963d01e47b565196594f7a17dbd063ae55b97b36268fcc843975278ee
checksum: 10c0/0c677d711c4aa41f94e1a712aa647022ba1910ff84430739e5d9e95a615e3ea1b7112dc93164fc8ce30dc715befcf9cfdc64da27d4e7958d73c59bda06aa0d8e
languageName: node
linkType: hard