Ghost/package.json
Fabien O'Carroll 944c2cc9af
🔒 Fixed member email change vulnerability
refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-65p7-pjj8-ggmr

This updates the signup/signin flow for members to no longer support the
email address change flow - which had missing authentication. It has
been replaced with a dedicated email change flow, and Portal has been
updated to use it.
2021-09-23 10:49:30 +01:00

205 lines
7.4 KiB
JSON

{
"name": "ghost",
"version": "4.15.0",
"description": "The professional publishing platform",
"author": "Ghost Foundation",
"homepage": "https://ghost.org",
"keywords": [
"ghost",
"blog",
"cms",
"headless",
"content",
"markdown"
],
"repository": {
"type": "git",
"url": "git://github.com/TryGhost/Ghost.git"
},
"bugs": "https://github.com/TryGhost/Ghost/issues",
"contributors": "https://github.com/TryGhost/Ghost/graphs/contributors",
"license": "MIT",
"scripts": {
"start": "node index",
"dev": "grunt dev",
"dev:debug": "DEBUG=ghost:* grunt dev",
"setup": "yarn install && knex-migrator init && grunt symlink && grunt init || (exit 0)",
"main": "grunt shell:main && grunt subgrunt:init",
"build": "grunt build",
"test": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js --timeout=60000",
"test:all": "yarn test:unit && yarn test:acceptance && yarn lint",
"test:debug": "DEBUG=ghost:test* yarn test",
"test:unit": "c8 --all -n 'core/{*.js,frontend,server,shared}' --reporter text-summary mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/unit' --timeout=2000",
"test:acceptance": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/api-acceptance' './test/frontend-acceptance' --timeout=10000",
"test:regression": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/regression' --timeout=60000",
"test:reg:slow": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/regression' --timeout=60000 --reporter=mocha-slow-test-reporter",
"test:slow": "yarn test:unit --reporter=mocha-slow-test-reporter && yarn test:acceptance --reporter=mocha-slow-test-reporter",
"cov:unit": "c8 report --all -n 'core/{*.js,frontend,server,shared}' --reporter text --reporter html",
"lint:server": "eslint --ignore-path .eslintignore 'core/server/**/*.js' 'core/*.js' '*.js'",
"lint:shared": "eslint --ignore-path .eslintignore 'core/shared/**/*.js'",
"lint:frontend": "eslint --ignore-path .eslintignore 'core/frontend/**/*.js'",
"lint:test": "eslint -c test/.eslintrc.js --ignore-path test/.eslintignore 'test/**/*.js'",
"lint:code": "yarn lint:server && yarn lint:shared && yarn lint:frontend",
"lint": "yarn lint:server && yarn lint:shared && yarn lint:frontend && yarn lint:test",
"fix:client": "yarn cache clean && cd core/client && rm -rf node_modules tmp dist && yarn && cd ../../",
"fix:server": "yarn cache clean && rm -rf node_modules && yarn",
"fix": "yarn fix:client && yarn fix:server"
},
"engines": {
"node": "^12.22.1 || ^14.16.1",
"cli": "^1.17.0"
},
"dependencies": {
"@nexes/nql": "0.6.0",
"@sentry/node": "6.12.0",
"@tryghost/adapter-manager": "0.2.14",
"@tryghost/admin-api-schema": "2.6.0",
"@tryghost/bookshelf-plugins": "0.3.1",
"@tryghost/bootstrap-socket": "0.2.9",
"@tryghost/color-utils": "0.1.2",
"@tryghost/config-url-helpers": "0.1.0",
"@tryghost/constants": "0.1.8",
"@tryghost/debug": "0.1.5",
"@tryghost/email-analytics-provider-mailgun": "1.0.0",
"@tryghost/email-analytics-service": "1.0.0",
"@tryghost/errors": "0.2.13",
"@tryghost/helpers": "1.1.52",
"@tryghost/image-transform": "1.0.13",
"@tryghost/job-manager": "0.8.7",
"@tryghost/kg-card-factory": "3.0.4",
"@tryghost/kg-default-atoms": "3.0.0",
"@tryghost/kg-default-cards": "5.0.7",
"@tryghost/kg-markdown-html-renderer": "5.0.5",
"@tryghost/kg-mobiledoc-html-renderer": "5.1.1",
"@tryghost/limit-service": "0.6.1",
"@tryghost/logging": "0.1.7",
"@tryghost/magic-link": "1.0.11",
"@tryghost/members-api": "1.32.3",
"@tryghost/members-csv": "1.1.6",
"@tryghost/members-importer": "0.3.2",
"@tryghost/members-ssr": "1.0.12",
"@tryghost/mw-session-from-token": "0.1.22",
"@tryghost/nodemailer": "0.3.2",
"@tryghost/package-json": "1.0.2",
"@tryghost/promise": "0.1.9",
"@tryghost/request": "0.1.5",
"@tryghost/root-utils": "0.3.4",
"@tryghost/security": "0.2.9",
"@tryghost/session-service": "0.1.24",
"@tryghost/social-urls": "0.1.26",
"@tryghost/string": "0.1.20",
"@tryghost/tpl": "0.1.3",
"@tryghost/update-check-service": "0.2.2",
"@tryghost/url-utils": "2.0.2",
"@tryghost/validator": "0.1.5",
"@tryghost/version": "0.1.4",
"@tryghost/vhost-middleware": "1.0.15",
"@tryghost/zip": "1.1.14",
"amperize": "0.6.1",
"analytics-node": "5.1.0",
"bluebird": "3.7.2",
"body-parser": "1.19.0",
"bookshelf": "1.2.0",
"bookshelf-relations": "2.2.0",
"brute-knex": "4.0.1",
"bson-objectid": "2.0.1",
"bthreads": "0.5.1",
"cheerio": "0.22.0",
"compression": "1.7.4",
"connect-slashes": "1.4.0",
"cookie-session": "1.4.0",
"cors": "2.8.5",
"downsize": "0.0.8",
"express": "4.17.1",
"express-brute": "1.0.1",
"express-hbs": "2.4.0",
"express-jwt": "6.1.0",
"express-query-boolean": "2.0.0",
"express-session": "1.17.2",
"fs-extra": "10.0.0",
"ghost-storage-base": "0.0.6",
"glob": "7.1.7",
"got": "9.6.0",
"gscan": "4.2.1",
"html-to-text": "5.1.1",
"image-size": "1.0.0",
"intl": "1.2.5",
"intl-messageformat": "5.4.3",
"js-yaml": "4.1.0",
"jsonpath": "1.1.1",
"jsonwebtoken": "8.5.1",
"juice": "8.0.0",
"keypair": "1.0.3",
"knex": "0.21.21",
"knex-migrator": "4.0.4",
"lodash": "4.17.21",
"mailgun-js": "0.22.0",
"metascraper": "5.24.6",
"metascraper-author": "5.24.6",
"metascraper-description": "5.24.6",
"metascraper-image": "5.24.6",
"metascraper-logo": "5.24.6",
"metascraper-logo-favicon": "5.24.6",
"metascraper-publisher": "5.24.6",
"metascraper-title": "5.24.6",
"metascraper-url": "5.24.6",
"moment": "2.24.0",
"moment-timezone": "0.5.23",
"multer": "1.4.3",
"mysql": "2.18.1",
"nconf": "0.11.3",
"node-jose": "2.0.0",
"oembed-parser": "1.4.8",
"passport": "0.4.1",
"passport-google-oauth": "2.0.0",
"path-match": "1.2.4",
"probe-image-size": "5.0.0",
"rss": "1.2.2",
"sanitize-html": "2.5.1",
"semver": "7.3.5",
"stoppable": "1.1.0",
"tough-cookie": "4.0.0",
"uuid": "8.3.2",
"xml": "1.0.1"
},
"optionalDependencies": {
"@tryghost/html-to-mobiledoc": "0.7.17",
"sqlite3": "5.0.2"
},
"devDependencies": {
"@lodder/grunt-postcss": "3.0.1",
"c8": "7.9.0",
"coffeescript": "2.5.1",
"cssnano": "5.0.8",
"eslint": "7.32.0",
"eslint-plugin-ghost": "2.6.0",
"grunt": "1.4.1",
"grunt-bg-shell": "2.3.3",
"grunt-contrib-clean": "2.0.0",
"grunt-contrib-compress": "2.0.0",
"grunt-contrib-copy": "1.0.0",
"grunt-contrib-symlink": "1.0.0",
"grunt-contrib-watch": "1.1.0",
"grunt-express-server": "0.5.4",
"grunt-shell": "3.0.1",
"grunt-subgrunt": "1.3.0",
"grunt-update-submodules": "0.4.1",
"jwks-rsa": "2.0.4",
"mocha": "9.1.1",
"mocha-slow-test-reporter": "0.1.2",
"mock-knex": "0.4.10",
"nock": "13.1.3",
"papaparse": "5.3.1",
"postcss": "8.3.6",
"rewire": "5.0.0",
"should": "13.2.3",
"sinon": "11.1.2",
"supertest": "6.1.6",
"tmp": "0.2.1"
},
"resolutions": {
"moment": "2.24.0",
"moment-timezone": "0.5.23"
}
}