From 8bad9cee08982fffa5ce8244148b491e66191ed8 Mon Sep 17 00:00:00 2001 From: Alan Agius Date: Wed, 23 Oct 2024 09:27:37 +0000 Subject: [PATCH] fix(@angular-devkit/build-angular): update `http-proxy-middleware` to `2.0.7` Address CVE-2024-21536 Closes #28680 --- package.json | 2 +- packages/angular_devkit/build_angular/package.json | 2 +- yarn.lock | 11 +++++++++++ 3 files changed, 13 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index fd8b1fed6a05..ec2b1d689b6e 100644 --- a/package.json +++ b/package.json @@ -146,7 +146,7 @@ "express": "4.18.3", "fast-glob": "3.3.2", "http-proxy": "^1.18.1", - "http-proxy-middleware": "2.0.6", + "http-proxy-middleware": "2.0.7", "https-proxy-agent": "7.0.4", "husky": "9.0.11", "ini": "4.1.2", diff --git a/packages/angular_devkit/build_angular/package.json b/packages/angular_devkit/build_angular/package.json index d89663514e8e..8ec2f89b8a30 100644 --- a/packages/angular_devkit/build_angular/package.json +++ b/packages/angular_devkit/build_angular/package.json @@ -33,7 +33,7 @@ "esbuild-wasm": "0.20.1", "fast-glob": "3.3.2", "https-proxy-agent": "7.0.4", - "http-proxy-middleware": "2.0.6", + "http-proxy-middleware": "2.0.7", "inquirer": "9.2.15", "jsonc-parser": "3.2.1", "karma-source-map-support": "1.4.0", diff --git a/yarn.lock b/yarn.lock index 22fb59af4eb8..32ab027b0b6b 100644 --- a/yarn.lock +++ b/yarn.lock @@ -8172,6 +8172,17 @@ http-proxy-middleware@2.0.6, http-proxy-middleware@^2.0.3: is-plain-obj "^3.0.0" micromatch "^4.0.2" +http-proxy-middleware@2.0.7: + version "2.0.7" + resolved "https://registry.yarnpkg.com/http-proxy-middleware/-/http-proxy-middleware-2.0.7.tgz#915f236d92ae98ef48278a95dedf17e991936ec6" + integrity sha512-fgVY8AV7qU7z/MmXJ/rxwbrtQH4jBQ9m7kp3llF0liB7glmFeVZFBepQb32T3y8n8k2+AEYuMPCpinYW+/CuRA== + dependencies: + "@types/http-proxy" "^1.17.8" + http-proxy "^1.18.1" + is-glob "^4.0.1" + is-plain-obj "^3.0.0" + micromatch "^4.0.2" + http-proxy@^1.18.1: version "1.18.1" resolved "https://registry.yarnpkg.com/http-proxy/-/http-proxy-1.18.1.tgz#401541f0534884bbf95260334e72f88ee3976549"