Commit 5140f42
committed
[build] Fix vulnerability in js-cookie <=3.0.5
```
$ npm audit report
js-cookie <=3.0.5
Severity: high
JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection - GHSA-qjx8-664m-686j
No fix available
node_modules/js-cookie
@segment/analytics-next *
Depends on vulnerable versions of js-cookie
node_modules/@segment/analytics-next
```
Fixes: https://github.com/redhat-developer/vscode-openshift-tools/security/dependabot/169
Signed-off-by: Victor Rubezhny <vrubezhny@redhat.com>1 parent f432a37 commit 5140f42
2 files changed
Lines changed: 5 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
197 | 197 | | |
198 | 198 | | |
199 | 199 | | |
| 200 | + | |
200 | 201 | | |
201 | 202 | | |
202 | 203 | | |
| |||
0 commit comments