Ts-jest version 24.3.0 provides a preprocessor for utilizing TypeScript with Jest, building upon the functionalities of version 24.2.0. Both versions offer source map support for easier debugging and maintain compatibility with Jest 24.x. Core dependencies like json5, mkdirp, semver, resolve, and other essential utilities remain consistent, ensuring a stable foundation for TypeScript testing within Jest environments. Developers leveraging either version benefit from seamless integration, enabling them to write tests in TypeScript without complex configurations.
The key update in version 24.3.0 lies in its release date, indicating more recent maintenance and potential bug fixes. While the dependency lists are largely identical, subtle internal improvements might be present, contributing to enhanced performance or stability. Developers considering an upgrade should evaluate the release notes or changelog for specific details on these potential enhancements. The unpacked size slightly increases in the newer version, which could indicate minimal additions. Both versions maintain the same peer dependency for Jest, requiring a version greater than or equal to 24 and less than 25. Overall, the upgrade from 24.2.0 to 24.3.0 appears incremental, focusing on refining the existing capabilities and ensuring continued compatibility within the broader TypeScript and Jest ecosystem. The later version ensures developers are using the most up-to-date and potentially more stable iteration of ts-jest.
All the vulnerabilities related to the version 24.3.0 of the package
yargs-parser Vulnerable to Prototype Pollution
Affected versions of yargs-parser are vulnerable to prototype pollution. Arguments are not properly sanitized, allowing an attacker to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects.
Parsing the argument --foo.__proto__.bar baz' adds a bar property with value baz to all objects. This is only exploitable if attackers have control over the arguments being passed to yargs-parser.
Upgrade to versions 13.1.2, 15.0.1, 18.1.1 or later.
