Commit 027d07b
committed
fix(deps): Bump faraday to 1.10.6 in react-native-macos sample
Same advisory as the previous commit (GHSA-98m9-hrrm-r99r / CVE-2026-54297): uncontrolled recursion in Faraday::NestedParamsEncoder allowing stack-exhaustion DoS via deeply nested query parameters.
Addresses Dependabot alert #579. Lockfile bump only; stays on the 1.x line for compatibility with the pinned faraday-* companion gems and fastlane.1 parent 36924d5 commit 027d07b
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
102 | 102 | | |
103 | 103 | | |
104 | 104 | | |
105 | | - | |
| 105 | + | |
106 | 106 | | |
107 | 107 | | |
108 | 108 | | |
| |||
0 commit comments