Skip to content

refactor: Remote code execution via MongoDB BSON parser through prototype pollution #8676

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 3 commits into from
Jun 28, 2023
Merged

refactor: Remote code execution via MongoDB BSON parser through prototype pollution #8676

merged 3 commits into from
Jun 28, 2023

Conversation

mtrezza
Copy link
Member

@mtrezza mtrezza commented Jun 28, 2023 •
edited
Loading

Fixes security vulnerability GHSA-462x-c3jw-7vr6

@parse-github-assistant
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title fix: alpha 7vr6 fix: Alpha 7vr6 Jun 28, 2023
@parse-github-assistant
Copy link

parse-github-assistant bot commented Jun 28, 2023 •
edited
Loading

Thanks for opening this pull request!

  • ❌ Please link an issue that describes the reason for this pull request, otherwise your pull request will be closed. Make sure to write it as Closes: #123 in the PR description, so I can recognize it.

@mtrezza mtrezza changed the title fix: Alpha 7vr6 refactor: Remote code execution via MongoDB BSON parser through prototype pollution Jun 28, 2023
@codecov
Copy link

codecov bot commented Jun 28, 2023 •
edited
Loading

Codecov Report

Patch coverage: 100.00% and project coverage change: -0.02 ⚠️

Comparison is base (cc079a4) 94.36% compared to head (5fa3bcd) 94.35%.

❗ Current head 5fa3bcd differs from pull request most recent head 98dfde2. Consider uploading reports for the commit 98dfde2 to get more accurate results

Additional details and impacted files 
@@            Coverage Diff             @@
##            alpha    #8676      +/-   ##
==========================================
- Coverage   94.36%   94.35%   -0.02%     
==========================================
  Files         185      185              
  Lines       14756    14761       +5     
==========================================
+ Hits        13925    13928       +3     
- Misses        831      833       +2
Impacted Files Coverage Δ
src/Controllers/DatabaseController.js 93.98% <100.00%> (+0.05%) ⬆️
src/RestWrite.js 94.87% <100.00%> (-0.04%) ⬇️
src/Routers/FilesRouter.js 93.29% <100.00%> (-0.05%) ⬇️
src/Utils.js 98.13% <100.00%> (+0.09%) ⬆️

... and 1 file with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

@mtrezza mtrezza merged commit 31805c9 into alpha Jun 28, 2023
@mtrezza mtrezza deleted the fix-alpha-7vr6 branch June 28, 2023 21:38
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 6.3.0-alpha.4

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Jul 4, 2023
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 6.4.0-beta.1

@parseplatformorg parseplatformorg added the state:released-beta Released as beta version label Sep 16, 2023
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 6.4.0-alpha.1

@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 6.4.0

@parseplatformorg parseplatformorg added the state:released Released as stable version label Nov 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
state:released Released as stable version state:released-alpha Released as alpha version state:released-beta Released as beta version
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@mtrezza @parseplatformorg @dblythy