Skip to content

Commit af11c99

Browse files
authored
fix: update minimatch to 3.1.5 to resolve security vulnerabilities (#228)
* fix: update minimatch to 3.1.5 to resolve security vulnerabilities Bumps minimatch from 3.1.2 to 3.1.5, the latest patch in the 3.x line. This resolves the following CVEs: - GHSA-3ppc-4f35-3m26 (ReDoS via repeated wildcards, high severity) - GHSA-7r86-cg39-jmmj (ReDoS via multiple non-adjacent GLOBSTAR segments, high severity) - GHSA-23c5-xmqv-rm74 (ReDoS via nested *() extglobs, high severity) Fixes #206 * chore: update yarn.lock for minimatch 3.1.5
1 parent 6ba5e33 commit af11c99

2 files changed

Lines changed: 9 additions & 2 deletions

File tree

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@
6666
"content-disposition": "0.5.2",
6767
"fast-url-parser": "1.1.3",
6868
"mime-types": "2.1.18",
69-
"minimatch": "3.1.2",
69+
"minimatch": "3.1.5",
7070
"path-is-inside": "1.0.2",
7171
"path-to-regexp": "2.2.1",
7272
"range-parser": "1.2.0"

yarn.lock

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2634,7 +2634,14 @@ mimic-response@^1.0.0, mimic-response@^1.0.1:
26342634
resolved "https://registry.yarnpkg.com/mimic-response/-/mimic-response-1.0.1.tgz#4923538878eef42063cb8a3e3b0798781487ab1b"
26352635
integrity sha512-j5EctnkH7amfV/q5Hgmoal1g2QHFJRraOtmx0JpIqkxhBhI/lJSl1nMpQ45hVarwNETOoWEimndZ4QK0RHxuxQ==
26362636

2637-
minimatch@3.1.2, minimatch@^3.0.4:
2637+
minimatch@3.1.5:
2638+
version "3.1.5"
2639+
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.1.5.tgz#580c88f8d5445f2bd6aa8f3cadefa0de79fbd69e"
2640+
integrity sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==
2641+
dependencies:
2642+
brace-expansion "^1.1.7"
2643+
2644+
minimatch@^3.0.4:
26382645
version "3.1.2"
26392646
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.1.2.tgz#19cd194bfd3e428f049a70817c038d89ab4be35b"
26402647
integrity sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==

0 commit comments

Comments
 (0)