New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump dependencies for security #77

Merged

johanholmerin merged 1 commit into johanholmerin:master from SukkaW:security-loader-util-minimist

Nov 9, 2022

Contributor

SukkaW commented Nov 8, 2022 •

edited

The PR bumps 2 dependencies:

loader-utils: from 1.4.0 to 1.4.1
- This is to fix CVE-2022-37601
json5: from 2.2.0 to 2.2.1
- This is to fix CVE-2021-44906, see also Minimist vulnerability CVE-2021-44906 json5/json5#266

Those 2 dependencies still have their versions pinned after the PR.


          Bump dependencies for security

cffa58a

Owner

johanholmerin commented Nov 9, 2022

Thanks

johanholmerin merged commit 8e9a7bc into johanholmerin:master

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment