github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-05-07 03:23:29 -05:00
Code Issues 1.1k Packages Projects Releases 122 Wiki Activity

[PR #3185] [CLOSED] [PM-7679] Patched Fix Improperly Controlled Prototype Pollution #45681

New Issue
Closed
opened 2026-04-26 12:58:00 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-26 12:58:00 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/bitwarden/android/pull/3185
Author: @streetfact
Created: 4/23/2024
Status: ❌ Closed

Base: main ← Head: patch-1

📝 Commits (10+)

  • f31c87b Bumped version to 2023.7.0 (#2612)
  • fdc0313 Fix Build Workflow (#2613)
  • a25da68 Fix syntax in Version Auto Bump workflow (#2615)
  • 1f20f70 Fixing show value id button (#2620)
  • 9adc4d3 Catch additional exception types when validating intents (#2618)
  • 6d7970f [AC-762] Configure Crowdin to localize watch app (#2552)
  • cd9e49b ac-1425 added main thread invocations when updating the vault properties to fix cases where the screen stays blank and doesn't update (#2604)
  • c678c17 Bumped version to 2023.7.1 (#2625)
  • dd52ff0 [PM-2320] Improve Android block Auto-fill URIs (#2616)
  • ae9ba81 Autosync the updated translations (#2634)

📊 Changes

1 file changed (+6 additions, -6 deletions)

View changed files

📝 package-lock.json (+6 -6)

📄 Description

A vulnerability exists in Async through 3.2.1 for 3.x and through 2.6.3 for 2.x (fixed in 3.2.2 and 2.6.4), which could let a malicious user obtain privileges via the mapValues() method.

Type of change

  • Bug fix
  • New feature development
  • Tech debt (refactoring, code cleanup, dependency upgrades, etc)
  • Build/deploy pipeline (DevOps)
  • Other

Objective

Code changes

  • file.ext: Description of what was changed and why

Screenshots

Before you submit

  • Please check for formatting errors (dotnet format --verify-no-changes) (required)
  • Please add unit tests where it makes sense to do so (encouraged but not required)
  • If this change requires a documentation update - notify the documentation team
  • If this change has particular deployment requirements - notify the DevOps team

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/bitwarden/android/pull/3185 **Author:** [@streetfact](https://github.com/streetfact) **Created:** 4/23/2024 **Status:** ❌ Closed **Base:** `main` ← **Head:** `patch-1` --- ### 📝 Commits (10+) - [`f31c87b`](https://github.com/bitwarden/android/commit/f31c87b52e6b6a46f5d077793b84297a7363d864) Bumped version to 2023.7.0 (#2612) - [`fdc0313`](https://github.com/bitwarden/android/commit/fdc0313d1092a5fbdefddd905b5e3193a1fa3183) Fix Build Workflow (#2613) - [`a25da68`](https://github.com/bitwarden/android/commit/a25da68437dbf4a6a6205b2838ec86f821d1e7ec) Fix syntax in Version Auto Bump workflow (#2615) - [`1f20f70`](https://github.com/bitwarden/android/commit/1f20f70d13876685546a4ee0e3ea36b48a71fe0b) Fixing show value id button (#2620) - [`9adc4d3`](https://github.com/bitwarden/android/commit/9adc4d30807030ea7d559d2a52d02a9bb3f8eeb2) Catch additional exception types when validating intents (#2618) - [`6d7970f`](https://github.com/bitwarden/android/commit/6d7970f76777cdb3fbdcc47a88c448728c8c2b2f) [AC-762] Configure Crowdin to localize watch app (#2552) - [`cd9e49b`](https://github.com/bitwarden/android/commit/cd9e49b13b26ad02e69b8bd503725b373cac3285) ac-1425 added main thread invocations when updating the vault properties to fix cases where the screen stays blank and doesn't update (#2604) - [`c678c17`](https://github.com/bitwarden/android/commit/c678c17ebc3ccfaa9ba23f1921af503e0490e5a2) Bumped version to 2023.7.1 (#2625) - [`dd52ff0`](https://github.com/bitwarden/android/commit/dd52ff0dccb45c067f0a36877e741c14c089a19c) [PM-2320] Improve Android block Auto-fill URIs (#2616) - [`ae9ba81`](https://github.com/bitwarden/android/commit/ae9ba810ffef5fc6ea6c694d8381c852759ad556) Autosync the updated translations (#2634) ### 📊 Changes **1 file changed** (+6 additions, -6 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+6 -6) </details> ### 📄 Description A vulnerability exists in Async through 3.2.1 for 3.x and through 2.6.3 for 2.x (fixed in 3.2.2 and 2.6.4), which could let a malicious user obtain privileges via the mapValues() method. ## Type of change - [x] Bug fix - [x] New feature development - [ ] Tech debt (refactoring, code cleanup, dependency upgrades, etc) - [ ] Build/deploy pipeline (DevOps) - [ ] Other ## Objective <!--Describe what the purpose of this PR is. For example: what bug you're fixing or what new feature you're adding--> ## Code changes <!--Explain the changes you've made to each file or major component. This should help the reviewer understand your changes--> <!--Also refer to any related changes or PRs in other repositories--> * **file.ext:** Description of what was changed and why ## Screenshots <!--Required for any UI changes. Delete if not applicable--> ## Before you submit - Please check for formatting errors (`dotnet format --verify-no-changes`) (required) - Please add **unit tests** where it makes sense to do so (encouraged but not required) - If this change requires a **documentation update** - notify the documentation team - If this change has particular **deployment requirements** - notify the DevOps team --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-26 12:58:00 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#45681
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?