Skip to content

Commit 9c805e9

Browse files
committedJan 10, 2022
Update the readme
1 parent 045a7fd commit 9c805e9

File tree

2 files changed

+9
-1
lines changed

2 files changed

+9
-1
lines changed
 

‎CHANGELOG.md

+8
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,13 @@
11
# Change Log
22

3+
## 2.0.2
4+
5+
Thanks [@panzi](https://github.com/panzi) for rebuilding the test system and removing Gulp as a dev dependency.
6+
7+
## 2.0.1
8+
9+
The operations object could be exploited to run arbitrary code. Resolves [SNYK-JS-JSONLOGICJS-674308](https://security.snyk.io/vuln/SNYK-JS-JSONLOGICJS-674308), thanks Arel Cordero for reporting.
10+
311
## 2.0.0
412

513
Major version bump because we're removing the `method` operation. The [NPM advisory 1542](https://www.npmjs.com/advisories/1542) shows that an attacker can supply a JsonLogic rule that will execute arbitrary code in the client of anyone who executes that rule with any data.

‎package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "json-logic-js",
3-
"version": "2.0.1",
3+
"version": "2.0.2",
44
"description": "Build complex rules, serialize them as JSON, and execute them in JavaScript",
55
"main": "logic.js",
66
"directories": {

0 commit comments

Comments
 (0)