Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[frontend] Fix vulnerabilities reported by npm audit #3524

Merged
merged 2 commits into from
Nov 3, 2023

Commits on Nov 1, 2023

  1. [frontend] Fix vulnerabilities reported by npm audit

    The following packages were automatically upgraded to safe versions by running "npm audit fix":
    
    adobe/css-tools  <4.3.1
    Severity: moderate
    Regular Expression Denial of Service (ReDOS) while Parsing CSS - GHSA-hpx4-r86g-5jrg
    
    @babel/traverse  <7.23.2
    Severity: critical
    Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code - GHSA-67hx-6x53-jw92
    
    json5  <1.0.2
    Severity: high
    Prototype Pollution in JSON5 via Parse Method - GHSA-9c47-m6qq-7p4h
    
    postcss  <8.4.31
    Severity: moderate
    PostCSS line return parsing error - GHSA-7fh5-64p2-3v2j
    
    semver  <5.7.2 || >=7.0.0 <7.5.2
    Severity: moderate
    semver vulnerable to Regular Expression Denial of Service - GHSA-c2qf-rxjj-qqgw
    JohanAhlen committed Nov 1, 2023
    Configuration menu
    Copy the full SHA
    3b9cad1 View commit details
    Browse the repository at this point in the history

Commits on Nov 3, 2023

  1. Configuration menu
    Copy the full SHA
    6aa2268 View commit details
    Browse the repository at this point in the history