Skip to content

Commit 4e939dc

Browse files
authored
fix(deps): patch minimatch ReDoS vulnerabilities via npm audit fix (#7754)
# Motivation ``` # npm audit report minimatch <=3.1.3 || 10.0.0 - 10.2.2 Severity: high minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments - GHSA-7r86-cg39-jmmj minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions - GHSA-23c5-xmqv-rm74 minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions - GHSA-23c5-xmqv-rm74 fix available via `npm audit fix` node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch node_modules/minimatch svelte <=5.53.4 Severity: moderate Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers - GHSA-qgvg-pr8v-6rr3 Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent` - GHSA-phwv-c562-gvmh fix available via `npm audit fix` node_modules/svelte 2 vulnerabilities (1 moderate, 1 high) To address all issues, run: npm audit fix ``` # Changes - Ran `npm audit fix` # Tests - CI is green # Todos - [x] Accessibility (a11y) – any impact? - [x] Changelog – is it needed?
1 parent 7f7ce27 commit 4e939dc

1 file changed

Lines changed: 9 additions & 9 deletions

File tree

frontend/package-lock.json

Lines changed: 9 additions & 9 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)