From 28dfe88199694ae065bc953d2f6cf320a72f9a32 Mon Sep 17 00:00:00 2001 From: Alexandre Alapetite Date: Fri, 1 Apr 2022 14:23:04 +0200 Subject: [PATCH] [Deps] update tsconfig-paths Security fix. See https://github.com/dividab/tsconfig-paths/pull/197 Weaknesses CWE-1321 CVE ID CVE-2021-44906 > Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95). (This currently triggers cascade alerts in many packages using eslint-plugin-import) --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 186c5cb57e..cfb2fb43ad 100644 --- a/package.json +++ b/package.json @@ -111,6 +111,6 @@ "minimatch": "^3.1.2", "object.values": "^1.1.5", "resolve": "^1.22.0", - "tsconfig-paths": "^3.13.0" + "tsconfig-paths": "^3.14.1" } }