[CVE 2024-47764] Update package 'cookie'

withastro · Oct 6, 2024 · 6ed3c6d · 6ed3c6d
1 parent af8401e
commit 6ed3c6d
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 6 deletions.
diff --git a/.changeset/twenty-spoons-sneeze.md b/.changeset/twenty-spoons-sneeze.md
@@ -0,0 +1,5 @@
+---
+'astro': patch
+---
+
+This updates Astro's dependency on the [`cookie`](https://npmjs.com/package/cookie) package to a version that is not susceptible to the [CVE 2024-47764](https://nvd.nist.gov/vuln/detail/CVE-2024-47764) vulnerability.
diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -140,7 +140,7 @@
     "ci-info": "^4.0.0",
     "clsx": "^2.1.1",
     "common-ancestor-path": "^1.0.1",
-    "cookie": "^0.6.0",
+    "cookie": "^0.7.1",
     "cssesc": "^3.0.0",
     "debug": "^4.3.7",
     "deterministic-object-hash": "^2.0.2",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml