Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: update @babel/traverse to 7.23.2 #282

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mhuggins
Copy link

Describe your changes

Fixes dependabot security issue that effects @babel/traverse version < 7.23.2:

Using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, when using plugins that rely on the path.evaluate() or path.evaluateTruthy() internal Babel methods.

Issue ticket number and link (if applicable)

N/A

Checklist before requesting a review

  • Project license confirmed
  • Unit-test added & passed at local development environment
  • All CI check passed
  • Design Document (if applicable)

Fixes dependabot security issue that effects @babel/traverse version < 7.23.2:

> Using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, when using plugins that rely on the `path.evaluate()` or `path.evaluateTruthy()` internal Babel methods.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant