From 1c945f814ebd761d0dc173f2fcbe323009415e26 Mon Sep 17 00:00:00 2001 From: Michael Froh Date: Thu, 5 Jan 2023 17:43:06 +0000 Subject: [PATCH] Resolve to newer versions of dependencies This addresses the following CVEs: ``` CVE-2021-3807 - Inefficient Regular Expression Complexity in chalk/ansi-regex CVE-2022-24999 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), qs vulnerable to Prototype Pollution GMS-2022-3113 - glob-parent before 6.0.1 and 5.1.2 vulnerable to Regular Expression Denial of Service (ReDoS) ``` Signed-off-by: Michael Froh --- package.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/package.json b/package.json index d19b4f6..881f9c6 100644 --- a/package.json +++ b/package.json @@ -16,5 +16,10 @@ "@types/enzyme-adapter-react-16": "^1.0.6", "cypress": "9.5.4", "eslint": "^6.8.0" + }, + "resolutions": { + "ansi-regex": "^5.0.1", + "glob-parent": "^6.0.1", + "qs": "~6.5.3" } }