Skip to content

Update mixin-deep to 1.3.2

What does this MR do?

Updates mixin-deep from 1.3.1 to 1.3.2 to address a Prototype Pollution vulnerability, which exists in mixin-deep package, versions >=2.0.0 <2.0.1 || <1.3.2 (CVE-2019-10746).

mixin-deep package is required by webpack.

Does this MR meet the acceptance criteria?

Conformity

Performance and testing

Security

  • [n/a] Label as security and @ mention @gitlab-com/gl-security/appsec
  • [n/a] The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • [n/a] Security reports checked/validated by a reviewer from the AppSec team

Closes #63945 (closed)

Edited by Takuya Noguchi

Merge request reports