From 29b4f33dff012056cb00547fe855381e84e108d8 Mon Sep 17 00:00:00 2001
From: Sri Harsha <12621691+harsha509@users.noreply.github.com>
Date: Thu, 9 Jun 2022 09:09:22 +0530
Subject: [PATCH 1/2] Fix Prototype Pollution in protobufjs

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 5792d44046..69a0b65cab 100644
--- a/package.json
+++ b/package.json
@@ -80,7 +80,7 @@
         "pkg_with_bin": "file:./tools/npm_packages/pkg_with_bin",
         "npm": "6.13.7",
         "patch-package": "^6.2.2",
-        "protobufjs": "6.8.8",
+        "protobufjs": "6.11.3",
         "protractor": "^5.4.2",
         "requirejs": "2.3.6",
         "rollup": "2.44.0",

From 75be2dd49e4ca3ad8a18d00458edadd4fbf3f259 Mon Sep 17 00:00:00 2001
From: harsha509 <sriharsha_sureshbabu@epam.com>
Date: Thu, 9 Jun 2022 09:52:24 +0530
Subject: [PATCH 2/2] fix: bump protobufjs to 6.11.3

---
 packages/concatjs/package.json   |  2 +-
 packages/typescript/package.json |  2 +-
 yarn.lock                        | 28 ++++++++++++++--------------
 3 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/packages/concatjs/package.json b/packages/concatjs/package.json
index a60da186fb..171cad1880 100644
--- a/packages/concatjs/package.json
+++ b/packages/concatjs/package.json
@@ -22,7 +22,7 @@
         "tsc_wrapped": "./internal/tsc_wrapped/tsc_wrapped.js"
     },
     "dependencies": {
-        "protobufjs": "6.8.8",
+        "protobufjs": "6.11.3",
         "source-map-support": "0.5.9",
         "tsutils": "3.21.0"
     },
diff --git a/packages/typescript/package.json b/packages/typescript/package.json
index 232d89ab6a..e71d4c296d 100644
--- a/packages/typescript/package.json
+++ b/packages/typescript/package.json
@@ -23,7 +23,7 @@
         "typescript": ">=3.0.0"
     },
     "dependencies": {
-        "protobufjs": "6.8.8",
+        "protobufjs": "6.11.3",
         "@bazel/worker": "0.0.0-PLACEHOLDER",
         "semver": "5.6.0",
         "source-map-support": "0.5.9",
diff --git a/yarn.lock b/yarn.lock
index 567396ae46..a73a283c9a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2149,10 +2149,10 @@
   resolved "https://registry.yarnpkg.com/@types/jasmine/-/jasmine-3.3.16.tgz#7c84074f5d7f84da9a14f816ccfb9aeb4da13f27"
   integrity sha512-Nveep4zKGby8uIvG2AEUyYOwZS8uVeHK9TgbuWYSawUDDdIgfhCKz28QzamTo//Jk7Ztt9PO3f+vzlB6a4GV1Q==
 
-"@types/long@^4.0.0":
-  version "4.0.0"
-  resolved "https://registry.yarnpkg.com/@types/long/-/long-4.0.0.tgz#719551d2352d301ac8b81db732acb6bdc28dbdef"
-  integrity sha512-1w52Nyx4Gq47uuu0EVcsHBxZFJgurQ+rTKS3qMHxR1GY2T8c2AJYd6vZoZ9q1rupaDjU0yT+Jc2XTyXkjeMA+Q==
+"@types/long@^4.0.1":
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/@types/long/-/long-4.0.2.tgz#b74129719fc8d11c01868010082d483b7545591a"
+  integrity sha512-MqTGEo5bj5t157U6fA/BiDynNkn0YknVdh48CMPkTSpFTVmvao5UQmm7uEF6xBEo7qIMAlY/JSleYaE6VOdpaA==
 
 "@types/minimist@^1.2.0":
   version "1.2.1"
@@ -2164,10 +2164,10 @@
   resolved "https://registry.yarnpkg.com/@types/node/-/node-15.12.2.tgz#1f2b42c4be7156ff4a6f914b2fb03d05fa84e38d"
   integrity sha512-zjQ69G564OCIWIOHSXyQEEDpdpGl+G348RAKY0XXy9Z5kU9Vzv1GMNnkar/ZJ8dzXB3COzD9Mo9NtRZ4xfgUww==
 
-"@types/node@^10.1.0":
-  version "10.17.60"
-  resolved "https://registry.yarnpkg.com/@types/node/-/node-10.17.60.tgz#35f3d6213daed95da7f0f73e75bcc6980e90597b"
-  integrity sha512-F0KIgDJfy2nA3zMLmWGKxcH2ZVEtCZXHHdOQs2gSaQ27+lNeEfGxzkIw90aXswATX7AZ33tahPbzy6KAfUreVw==
+"@types/node@>=13.7.0":
+  version "17.0.41"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-17.0.41.tgz#1607b2fd3da014ae5d4d1b31bc792a39348dfb9b"
+  integrity sha512-xA6drNNeqb5YyV5fO3OAEsnXLfO7uF0whiOfPTz5AeDo8KeZFmODKnvwPymMNO8qE/an8pVY/O50tig2SQCrGw==
 
 "@types/normalize-package-data@^2.4.0":
   version "2.4.0"
@@ -8827,10 +8827,10 @@ proto-list@~1.2.1:
   resolved "https://registry.yarnpkg.com/proto-list/-/proto-list-1.2.4.tgz#212d5bfe1318306a420f6402b8e26ff39647a849"
   integrity sha1-IS1b/hMYMGpCD2QCuOJv85ZHqEk=
 
-protobufjs@6.8.8:
-  version "6.8.8"
-  resolved "https://registry.yarnpkg.com/protobufjs/-/protobufjs-6.8.8.tgz#c8b4f1282fd7a90e6f5b109ed11c84af82908e7c"
-  integrity sha512-AAmHtD5pXgZfi7GMpllpO3q1Xw1OYldr+dMUlAnffGTAhqkg72WdmSY71uKBF/JuyiKs8psYbtKrhi0ASCD8qw==
+protobufjs@6.11.3:
+  version "6.11.3"
+  resolved "https://registry.yarnpkg.com/protobufjs/-/protobufjs-6.11.3.tgz#637a527205a35caa4f3e2a9a4a13ddffe0e7af74"
+  integrity sha512-xL96WDdCZYdU7Slin569tFX712BxsxslWwAfAhCYjQKGTq7dAU91Lomy6nLLhh/dyGhk/YH4TwTSRxTzhuHyZg==
   dependencies:
     "@protobufjs/aspromise" "^1.1.2"
     "@protobufjs/base64" "^1.1.2"
@@ -8842,8 +8842,8 @@ protobufjs@6.8.8:
     "@protobufjs/path" "^1.1.2"
     "@protobufjs/pool" "^1.1.0"
     "@protobufjs/utf8" "^1.1.0"
-    "@types/long" "^4.0.0"
-    "@types/node" "^10.1.0"
+    "@types/long" "^4.0.1"
+    "@types/node" ">=13.7.0"
     long "^4.0.0"
 
 protoc-gen-ts@^0.4.0: