Skip to content

Commit 027d07b

Browse files
committed
fix(deps): Bump faraday to 1.10.6 in react-native-macos sample
Same advisory as the previous commit (GHSA-98m9-hrrm-r99r / CVE-2026-54297): uncontrolled recursion in Faraday::NestedParamsEncoder allowing stack-exhaustion DoS via deeply nested query parameters. Addresses Dependabot alert #579. Lockfile bump only; stays on the 1.x line for compatibility with the pinned faraday-* companion gems and fastlane.
1 parent 36924d5 commit 027d07b

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

samples/react-native-macos/Gemfile.lock

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,7 @@ GEM
102102
ethon (0.16.0)
103103
ffi (>= 1.15.0)
104104
excon (0.112.0)
105-
faraday (1.10.5)
105+
faraday (1.10.6)
106106
faraday-em_http (~> 1.0)
107107
faraday-em_synchrony (~> 1.0)
108108
faraday-excon (~> 1.1)

0 commit comments

Comments
 (0)