chore(deps): update spcp-auth-client, mockpass (#1406)

Pick up the latest versions of spcp-auth-client and mockpass, both of which carry [email protected], which addresses a vulnerability involving malicious XML input (CVE-2021-21366)
opengovsg · Mar 18, 2021 · a048599 · a048599
1 parent b93de4e
commit a048599
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 62 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -63,7 +63,7 @@
     "@opengovsg/formsg-sdk": "^0.8.4-beta.0",
     "@opengovsg/myinfo-gov-client": "=4.0.0-beta.0",
     "@opengovsg/ng-file-upload": "^12.2.15",
-    "@opengovsg/spcp-auth-client": "^1.4.3",
+    "@opengovsg/spcp-auth-client": "^1.4.4",
     "@sentry/browser": "^6.2.2",
     "@sentry/integrations": "^6.2.2",
     "@stablelib/base64": "^1.0.0",
@@ -161,7 +161,7 @@
     "@babel/core": "^7.13.10",
     "@babel/plugin-transform-runtime": "^7.13.10",
     "@babel/preset-env": "^7.13.10",
-    "@opengovsg/mockpass": "^2.6.7",
+    "@opengovsg/mockpass": "^2.6.8",
     "@types/bcrypt": "^3.0.0",
     "@types/bluebird": "^3.5.33",
     "@types/busboy": "^0.2.3",