X-Git-Url: https://git.josue.xyz/?p=dotfiles%2F.git;a=blobdiff_plain;f=.config%2Fcoc%2Fextensions%2Fnode_modules%2Fcoc-prettier%2Fnode_modules%2Fjs-yaml%2FCHANGELOG.md;h=b4baa4eab25b4dc9ac03d6a359c9e9122e90ce52;hp=b35135786e768faffe74aa588598fd1c010838a4;hb=4d07c77cf4d78cab8639e13ddc3c22495e585b0b;hpb=b3950616b54221c40a7dab9099bda675007e5b6e diff --git a/.config/coc/extensions/node_modules/coc-prettier/node_modules/js-yaml/CHANGELOG.md b/.config/coc/extensions/node_modules/coc-prettier/node_modules/js-yaml/CHANGELOG.md index b3513578..b4baa4ea 100644 --- a/.config/coc/extensions/node_modules/coc-prettier/node_modules/js-yaml/CHANGELOG.md +++ b/.config/coc/extensions/node_modules/coc-prettier/node_modules/js-yaml/CHANGELOG.md @@ -6,6 +6,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [3.14.1] - 2020-12-07 +### Security +- Fix possible code execution in (already unsafe) `.load()` (in &anchor). + + ## [3.14.0] - 2020-05-22 ### Changed - Support `safe/loadAll(input, options)` variant of call. @@ -479,6 +484,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - First public release +[3.14.1]: https://github.com/nodeca/js-yaml/compare/3.14.0...3.14.1 [3.14.0]: https://github.com/nodeca/js-yaml/compare/3.13.1...3.14.0 [3.13.1]: https://github.com/nodeca/js-yaml/compare/3.13.0...3.13.1 [3.13.0]: https://github.com/nodeca/js-yaml/compare/3.12.2...3.13.0