Added specific dependency on ini [CVE-2020-7788]

comixed · Mar 1, 2021 · 2f43355 · 2f43355
1 parent 23bd654
commit 2f43355
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 0 deletions.
diff --git a/comixed-frontend/package.json b/comixed-frontend/package.json
@@ -47,6 +47,7 @@
     "core-js": "^2.5.4",
     "file-saver": "^2.0.2",
     "handlebars": "^4.3.0",
+    "ini": "^1.3.6",
     "jquery": "3.5.0",
     "lodash": "4.17.19",
     "messageformat": "^2.3.0",

diff --git a/comixed-frontend/yarn.lock b/comixed-frontend/yarn.lock
@@ -4529,6 +4529,11 @@ ini@1.3.5, ini@^1.3.4:
   resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.5.tgz#eee25f56db1c9ec6085e0c22778083f596abf927"
   integrity sha512-RZY5huIKCMRWDUqZlEi72f/lmXKMvuszcMBduliQ3nnWbx9X/ZBQO7DijMEYS9EhHBb2qacRUMtC7svLwe0lcw==
 
+ini@^1.3.6:
+  version "1.3.8"
+  resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.8.tgz#a29da425b48806f34767a4efce397269af28432c"
+  integrity sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==
+
 inquirer@6.5.1:
   version "6.5.1"
   resolved "https://registry.yarnpkg.com/inquirer/-/inquirer-6.5.1.tgz#8bfb7a5ac02dac6ff641ac4c5ff17da112fcdb42"

diff --git a/comixed-web/package.json b/comixed-web/package.json
@@ -45,6 +45,7 @@
     "@ngrx/store": "^10.0.1",
     "@ngx-translate/core": "^13.0.0",
     "@ngx-translate/http-loader": "^6.0.0",
+    "ini": "^1.3.6",
     "jasmine-marbles": "^0.6.0",
     "karma-coverage": "^2.0.3",
     "karma-firefox-launcher": "^2.1.0",

diff --git a/comixed-web/yarn.lock b/comixed-web/yarn.lock
@@ -4615,6 +4615,11 @@ ini@1.3.5, ini@^1.3.4:
   resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.5.tgz#eee25f56db1c9ec6085e0c22778083f596abf927"
   integrity sha512-RZY5huIKCMRWDUqZlEi72f/lmXKMvuszcMBduliQ3nnWbx9X/ZBQO7DijMEYS9EhHBb2qacRUMtC7svLwe0lcw==
 
+ini@^1.3.6:
+  version "1.3.8"
+  resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.8.tgz#a29da425b48806f34767a4efce397269af28432c"
+  integrity sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==
+
 inquirer@7.1.0:
   version "7.1.0"
   resolved "https://registry.yarnpkg.com/inquirer/-/inquirer-7.1.0.tgz#1298a01859883e17c7264b82870ae1034f92dd29"