Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump @babel/traverse to 7.23.2 #357

Closed
wants to merge 2 commits into from
Closed

Bump @babel/traverse to 7.23.2 #357

wants to merge 2 commits into from

Conversation

austinvalle
Copy link
Member

Fixes npm audit in our CI, babel is only a dev dependency, so no /dist changes.

 $ npm audit              
# npm audit report

@babel/traverse  <7.23.2
Severity: critical
Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code - https://github.com/advisories/GHSA-67hx-6x53-jw92
fix available via `npm audit fix`
node_modules/@babel/traverse

1 critical severity vulnerability

To address all issues, run:
  npm audit fix

@austinvalle austinvalle requested a review from a team as a code owner October 17, 2023 11:16
@austinvalle austinvalle added this to the v3.0.0 milestone Oct 17, 2023
@austinvalle austinvalle enabled auto-merge (squash) October 17, 2023 11:26
@austinvalle
Copy link
Member Author

Fixed by #356

auto-merge was automatically disabled October 17, 2023 12:09

Pull request was closed

@austinvalle austinvalle deleted the av/babel branch October 17, 2023 12:09
Copy link

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active contributions.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators May 23, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant