Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

npm audit fix #192

Merged
merged 1 commit into from
May 29, 2021
Merged

npm audit fix #192

merged 1 commit into from
May 29, 2021

Conversation

ybiquitous
Copy link
Member

Which issue, if any, is this issue related to?

See also #191

Is there anything in the PR that needs further explanation?

This change is generated by the npm audit fix command.

Fixed vulnerable dependencies:

browserslist  4.0.0 - 4.16.4
Severity: moderate
Regular Expression Denial of Service - https://npmjs.com/advisories/1747

hosted-git-info  <2.8.9 || >=3.0.0 <3.0.8
Severity: moderate
Regular Expression Denial of Service - https://npmjs.com/advisories/1677

y18n  <3.2.2||=4.0.0||>=5.0.0 <5.0.5
Severity: high
Prototype Pollution - https://npmjs.com/advisories/1654

This change is generated by the `npm audit fix` command.

Fixed vulnerable dependencies:

```
browserslist  4.0.0 - 4.16.4
Severity: moderate
Regular Expression Denial of Service - https://npmjs.com/advisories/1747

hosted-git-info  <2.8.9 || >=3.0.0 <3.0.8
Severity: moderate
Regular Expression Denial of Service - https://npmjs.com/advisories/1677

y18n  <3.2.2||=4.0.0||>=5.0.0 <5.0.5
Severity: high
Prototype Pollution - https://npmjs.com/advisories/1654
```

See also #191
@ybiquitous ybiquitous added pr: dependencies relates to dependencies type: security a security problem labels May 29, 2021
@jeddy3 jeddy3 merged commit b7ac0bf into master May 29, 2021
@jeddy3 jeddy3 deleted the npm-audit-fix branch May 29, 2021 08:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pr: dependencies relates to dependencies type: security a security problem
Development

Successfully merging this pull request may close these issues.

None yet

2 participants