Commit 4e939dc
authored
fix(deps): patch minimatch ReDoS vulnerabilities via npm audit fix (#7754)
# Motivation
```
# npm audit report
minimatch <=3.1.3 || 10.0.0 - 10.2.2
Severity: high
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments - GHSA-7r86-cg39-jmmj
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions - GHSA-23c5-xmqv-rm74
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions - GHSA-23c5-xmqv-rm74
fix available via `npm audit fix`
node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch
node_modules/minimatch
svelte <=5.53.4
Severity: moderate
Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers - GHSA-qgvg-pr8v-6rr3
Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent` - GHSA-phwv-c562-gvmh
fix available via `npm audit fix`
node_modules/svelte
2 vulnerabilities (1 moderate, 1 high)
To address all issues, run:
npm audit fix
```
# Changes
- Ran `npm audit fix`
# Tests
- CI is green
# Todos
- [x] Accessibility (a11y) – any impact?
- [x] Changelog – is it needed?1 parent 7f7ce27 commit 4e939dc
1 file changed
Lines changed: 9 additions & 9 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments