4.22.4

lukastaegert · lukastaegert · commit 79c0aba353ca · 2024-09-21T08:00:56.000+02:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,18 @@
 # rollup changelog
 
+## 4.22.4
+
+_2024-09-21_
+
+### Bug Fixes
+
+- Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)
+
+### Pull Requests
+
+- [#5670](https://github.com/rollup/rollup/pull/5670): refactor: Use object.prototype to check for reserved properties (@YuHyeonWook)
+- [#5671](https://github.com/rollup/rollup/pull/5671): Fix DOM Clobbering CVE (@lukastaegert)
+
 ## 4.22.3
 
 _2024-09-21_
diff --git a/browser/package.json b/browser/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@rollup/browser",
-  "version": "4.22.3",
+  "version": "4.22.4",
   "description": "Next-generation ES module bundler browser build",
   "main": "dist/rollup.browser.js",
   "module": "dist/es/rollup.browser.js",
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "rollup",
-  "version": "4.22.3",
+  "version": "4.22.4",
   "description": "Next-generation ES module bundler",
   "main": "dist/rollup.js",
   "module": "dist/es/rollup.js",

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@rollup/browser",`
`3`		`- "version": "4.22.3",`
	`3`	`+ "version": "4.22.4",`
`4`	`4`	`"description": "Next-generation ES module bundler browser build",`
`5`	`5`	`"main": "dist/rollup.browser.js",`
`6`	`6`	`"module": "dist/es/rollup.browser.js",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "rollup",`
`3`		`- "version": "4.22.3",`
	`3`	`+ "version": "4.22.4",`
`4`	`4`	`"description": "Next-generation ES module bundler",`
`5`	`5`	`"main": "dist/rollup.js",`
`6`	`6`	`"module": "dist/es/rollup.js",`