Require xml2js >=0.5.0 to address CVE-2023-0842

github · Apr 11, 2023 · c2b5d64 · c2b5d64
1 parent 9c13316
commit c2b5d64
Show file tree

Hide file tree

Showing 6 changed files with 45 additions and 18 deletions.
diff --git a/node_modules/.package-lock.json b/node_modules/.package-lock.json
diff --git a/node_modules/xml2js/README.md b/node_modules/xml2js/README.md
diff --git a/node_modules/xml2js/lib/parser.js b/node_modules/xml2js/lib/parser.js
diff --git a/node_modules/xml2js/package.json b/node_modules/xml2js/package.json
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -73,5 +73,8 @@
     "removeNPMAbsolutePaths": "3.0.0",
     "sinon": "^15.0.1",
     "typescript": "^5.0.2"
+  },
+  "overrides": {
+    "xml2js": ">=0.5.0"
   }
 }