chore(deps): bump jsonpath-plus to ^10.0.0 to mitigate CVE-2024-21534 (#1058)

coreydaley · knowacki23 · web-flow · commit e18f865b7d72 · 2024-10-28T15:04:41.000+01:00
* chore(deps): update dependency jsonpath-plus to 10.0.0 due to vulnerability

Signed-off-by: Nowacki, Kacper &lt;kacper.nowacki@dynatrace.com&gt;

* adding changeset

---------

Signed-off-by: Nowacki, Kacper &lt;kacper.nowacki@dynatrace.com&gt;
Co-authored-by: knowacki23 &lt;kacper.nowacki@dynatrace.com&gt;
diff --git a/.changeset/new-ears-clap.md b/.changeset/new-ears-clap.md
@@ -0,0 +1,6 @@
+---
+"@asyncapi/multi-parser": minor
+"@asyncapi/parser": minor
+---
+
+Updating jsonpath-plus dependency to mitigate CVE-2024-21534
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/parser/package.json b/packages/parser/package.json
@@ -59,7 +59,7 @@
     "ajv-formats": "^2.1.1",
     "avsc": "^5.7.5",
     "js-yaml": "^4.1.0",
-    "jsonpath-plus": "^7.2.0",
+    "jsonpath-plus": "^10.0.0",
     "node-fetch": "2.6.7"
   },
   "devDependencies": {
