fix: babel vulnerable to arbitrary code execution

related issue: https://github.com/awslabs/iot-app-kit/security/dependabot/106 fix: add @babel/traverse ^7.23.7 to package.json overrides
awslabs · Apr 10, 2024 · 8c32328 · 8c32328
1 parent 4dc8559
commit 8c32328
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 18 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -69,6 +69,7 @@
     "allowUnsafeName": "github repo"
   },
   "overrides": {
+    "@babel/traverse": "^7.23.7",
     "@types/react": "^18.0.28",
     "@types/react-dom": "^18.0.11",
     "fast-xml-parser": "^4.2.5",