Skip to content

Commit 5140f42

Browse files
committed
[build] Fix vulnerability in js-cookie <=3.0.5
``` $ npm audit report js-cookie <=3.0.5 Severity: high JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection - GHSA-qjx8-664m-686j No fix available node_modules/js-cookie @segment/analytics-next * Depends on vulnerable versions of js-cookie node_modules/@segment/analytics-next ``` Fixes: https://github.com/redhat-developer/vscode-openshift-tools/security/dependabot/169 Signed-off-by: Victor Rubezhny <vrubezhny@redhat.com>
1 parent f432a37 commit 5140f42

2 files changed

Lines changed: 5 additions & 4 deletions

File tree

package-lock.json

Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -197,6 +197,7 @@
197197
"cookie": "^1.1.1",
198198
"cross-spawn": "^7.0.6",
199199
"globals": "^17.4.0",
200+
"js-cookie": "^3.0.7",
200201
"tough-cookie": "^6.0.1",
201202
"tar-fs": "^3.1.2",
202203
"diff": "^8.0.3",

0 commit comments

Comments
 (0)