Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade cross-spawn version(s) to resolve CVE-2024-21538 #98

Merged
merged 1 commit into from
Feb 4, 2025

Conversation

rishi0508
Copy link
Contributor

@rishi0508 rishi0508 commented Feb 3, 2025

Summary

What does this PR do?

Before

We had 2 ^7.0.2 ^7.0.3 version(s) being requested for install
1 version(s) were installed: 7.0.3

yarn why cross-spawn
   └─ cross-spawn@npm:7.0.3 (via npm:^7.0.3)
│  └─ cross-spawn@npm:7.0.3 (via npm:^7.0.2)

After

yarn why cross-spawn
   └─ cross-spawn@npm:7.0.6 (via npm:^7.0.3)
│  └─ cross-spawn@npm:7.0.6 (via npm:^7.0.2)

Testing

How can the other reviewers check that your change works?

  • build should pass

@rishi0508 rishi0508 added the dependencies Pull requests that update a dependency file label Feb 3, 2025
@rishi0508 rishi0508 self-assigned this Feb 3, 2025
@rishi0508 rishi0508 marked this pull request as ready for review February 3, 2025 18:47
Copy link
Member

@only1chi only1chi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

Copy link

@birdie697 birdie697 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you

@rishi0508 rishi0508 merged commit f1f77cc into master Feb 4, 2025
6 checks passed
@rishi0508 rishi0508 deleted the CVE-2024-21538 branch February 4, 2025 16:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Upgrade cross-spawn to resolve CVE-2024-21538
3 participants