Ts-jest version 23.10.2 is a minor update to the popular preprocessor for using TypeScript with Jest, building upon the solid foundation of version 23.10.1. Both versions share the core functionality of enabling Jest to understand and execute TypeScript code with source map support, simplifying testing in TypeScript projects. They maintain identical dependencies, offering consistent support for libraries like json5, mkdirp, semver, and yargs-parser for configuration and utilities. Development dependencies remain consistent as well, safeguarding the linting, formatting, and build tools used within the project's development workflow.
The key differences between versions 23.10.1 and 23.10.2 lie in the distribution metadata. Version 23.10.2 exhibits a significantly larger file count (68 vs 35) and unpacked size (213693 vs 197999), which hints at improvements in documentation, examples, test scripts, or potentially the inclusion of more comprehensive type definitions. Thus, the upgrade likely addresses some edge cases or minor bugs, providing a more polished experience. Crucially, the core functionality and supported jest peer dependency range (>=22 <24) remain the same, minimizing breaking changes for existing users. Developers can expect similar setup and usage patterns while potentially benefiting from the expanded resources and refinements incorporated in the newer version. For developers integrating ts-jest into their workflow, this update signifies a focus on stability and user experience.
All the vulnerabilities related to the version 23.10.2 of the package
yargs-parser Vulnerable to Prototype Pollution
Affected versions of yargs-parser are vulnerable to prototype pollution. Arguments are not properly sanitized, allowing an attacker to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects.
Parsing the argument --foo.__proto__.bar baz' adds a bar property with value baz to all objects. This is only exploitable if attackers have control over the arguments being passed to yargs-parser.
Upgrade to versions 13.1.2, 15.0.1, 18.1.1 or later.
