Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

EDSC-3805: ran npm audit fix, fixed fast-xml-parser regex vulnerability #57

Closed
wants to merge 1 commit into from

Conversation

DanielJDufour
Copy link
Contributor

Overview

What is the feature?

updates sub-dependencies to address ReDos reported for fast-xml-parser

What is the Solution?

ran npm audit fix

What areas of the application does this impact?

cmr-graphql

Testing

Reproduction steps

  • Environment for testing:
  • Collection to test with:
  1. npm audit

Attachments

Please include relevant screenshots or files that would be helpful in reviewing and verifying this change.

Checklist

  • I have added automated tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings

@codecov
Copy link

codecov bot commented Jun 20, 2023

Codecov Report

Merging #57 (21ff08c) into main (51b27dc) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##              main       #57   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           57        57           
  Lines         1245      1245           
  Branches       162       162           
=========================================
  Hits          1245      1245           

@DanielJDufour DanielJDufour marked this pull request as ready for review June 20, 2023 20:14
@DanielJDufour DanielJDufour mentioned this pull request Jun 22, 2023
6 tasks
@macrouch macrouch deleted the EDSC-3805 branch June 23, 2023 15:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant