This affects the package set-value before 2.0.1, and starting with 3.…

…0.0 but prior to 4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.
microsoft · May 9, 2022 · 2dedc66 · 2dedc66
1 parent c976a42
commit 2dedc66
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/Tasks/AppCenterTestV1/package-lock.json b/Tasks/AppCenterTestV1/package-lock.json
diff --git a/Tasks/AppCenterTestV1/task.json b/Tasks/AppCenterTestV1/task.json
@@ -12,7 +12,7 @@
     "author": "Microsoft Corporation",
     "version": {
         "Major": 1,
-        "Minor": 198,
+        "Minor": 205,
         "Patch": 0
     },
     "groups": [

diff --git a/Tasks/AppCenterTestV1/task.loc.json b/Tasks/AppCenterTestV1/task.loc.json
@@ -12,7 +12,7 @@
   "author": "Microsoft Corporation",
   "version": {
     "Major": 1,
-    "Minor": 198,
+    "Minor": 205,
     "Patch": 0
   },
   "groups": [