Fixes CVE in xmldom by taking latest x2js

microsoft · Mar 18, 2021 · 717b31f · 717b31f
1 parent 2f2d88e
commit 717b31f
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 16 deletions.
diff --git a/BuildTasks/PublishExtension/.snyk b/BuildTasks/PublishExtension/.snyk
@@ -5,8 +5,4 @@ ignore:
   'npm:shelljs:20140723':
     - azure-pipelines-task-lib > shelljs:
         reason: No patch available. Code currently not exposed through extension.
-  SNYK-JS-XMLDOM-1084960:
-    - x2js > xmldom:
-        reason: No fix available at the moment.
-        expires: '2021-04-15T10:34:22.850Z'
 patch: {}
diff --git a/BuildTasks/PublishExtension/package-lock.json b/BuildTasks/PublishExtension/package-lock.json
diff --git a/BuildTasks/PublishExtension/package.json b/BuildTasks/PublishExtension/package.json
@@ -13,7 +13,7 @@
     "fs-extra": "^5.0.0",
     "temp": "^0.8.3",
     "uuidv5": "^1.0.0",
-    "x2js": "^3.4.0",
+    "x2js": "^3.4.1",
     "xmldom": "^0.5.0"
   },
   "devDependencies": {