Commit af11c99
authored
fix: update minimatch to 3.1.5 to resolve security vulnerabilities (#228)
* fix: update minimatch to 3.1.5 to resolve security vulnerabilities
Bumps minimatch from 3.1.2 to 3.1.5, the latest patch in the 3.x line.
This resolves the following CVEs:
- GHSA-3ppc-4f35-3m26 (ReDoS via repeated wildcards, high severity)
- GHSA-7r86-cg39-jmmj (ReDoS via multiple non-adjacent GLOBSTAR segments, high severity)
- GHSA-23c5-xmqv-rm74 (ReDoS via nested *() extglobs, high severity)
Fixes #206
* chore: update yarn.lock for minimatch 3.1.51 parent 6ba5e33 commit af11c99
2 files changed
Lines changed: 9 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
66 | 66 | | |
67 | 67 | | |
68 | 68 | | |
69 | | - | |
| 69 | + | |
70 | 70 | | |
71 | 71 | | |
72 | 72 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2634 | 2634 | | |
2635 | 2635 | | |
2636 | 2636 | | |
2637 | | - | |
| 2637 | + | |
| 2638 | + | |
| 2639 | + | |
| 2640 | + | |
| 2641 | + | |
| 2642 | + | |
| 2643 | + | |
| 2644 | + | |
2638 | 2645 | | |
2639 | 2646 | | |
2640 | 2647 | | |
| |||
0 commit comments