File tree Expand file tree Collapse file tree 3 files changed +13
-1
lines changed
javascript-node/.devcontainer/library-scripts
.devcontainer/local-features/setup-user Expand file tree Collapse file tree 3 files changed +13
-1
lines changed Original file line number Diff line number Diff line change @@ -10,4 +10,7 @@ IMAGE_VARIANT=$1
1010if [[ " ${IMAGE_VARIANT} " =~ " 14" ]] ; then
1111 cd /usr/local/lib/node_modules/npm
1212 npm update --save
13+
14+ cd /usr/local/lib/node_modules/npm/node_modules/string-width
15+ npm install ansi-regex --save
1316fi
Original file line number Diff line number Diff line change @@ -66,6 +66,10 @@ NPM_PACKAGES_LIST="ansi-regex
6666cd /usr/local/share/nvm/versions/node/v14* /lib/node_modules/npm
6767npm install ${NPM_PACKAGES_LIST}
6868
69+ # Temporary: ansi-regex: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807
70+ cd /usr/local/share/nvm/versions/node/v14* /lib/node_modules/npm/node_modules/string-width
71+ npm install ansi-regex --save
72+
6973# Temporary due to minimist: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44906 & https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7598
7074cd /usr/local/share/nvm/versions/node/v14* /lib/node_modules/npm/node_modules/tacks
7175npm update mkdirp
Original file line number Diff line number Diff line change @@ -185,7 +185,7 @@ decodeVersion=$(npm ls --depth 1 --json | jq -r '.dependencies."decode-uri-compo
185185check-version-ge " decode-uri-component" " ${decodeVersion} " " 0.2.1"
186186
187187ansiVersion=$( npm ls --depth 1 --json | jq -r ' .dependencies."ansi-regex".version' )
188- check-version-ge " ansi-regex" " ${ansiVersion} " " 6.0.0 "
188+ check-version-ge " ansi-regex" " ${ansiVersion} " " 6.0.1 "
189189
190190minimatchVersion=$( npm ls --depth 1 --json | jq -r ' .dependencies.minimatch.version' )
191191check-version-ge " minimatch" " ${minimatchVersion} " " 3.0.5"
@@ -196,6 +196,11 @@ check-version-ge "got" "${gotVersion}" "12.1.0"
196196qsVersion=$( npm ls --depth 1 --json | jq -r ' .dependencies.qs.version' )
197197check-version-ge " qs" " ${qsVersion} " " 6.10"
198198
199+ cd /usr/local/share/nvm/versions/node/v14* /lib/node_modules/npm/node_modules/string-width
200+
201+ ansiVersion=$( npm ls --depth 1 --json | jq -r ' .dependencies."ansi-regex".version' )
202+ check-version-ge " ansi-regex-2" " ${ansiVersion} " " 6.0.1"
203+
199204cd /usr/local/share/nvm/versions/node/v14* /lib/node_modules/npm/node_modules/tacks
200205
201206minimistVersion=$( npm ls --depth 1 --json | jq -r ' .dependencies.mkdirp.dependencies.minimist.version' )
You can’t perform that action at this time.
0 commit comments