Skip to content

Commit a172dc8

Browse files
committed
fix: resolve security vulnerabilities in react-scripts
- Update @svgr/webpack from 5.5.0 to 8.1.0 (fixes nth-check vulnerability) - Update postcss from 8.4.4 to 8.5.6 (fixes CVE-2024-36222) - Update webpack-dev-server from 4.6.0 to 5.2.2 (fixes source code theft vulnerabilities) - Update @pmmmwh/react-refresh-webpack-plugin from 0.5.3 to 0.6.1 - Update resolve-url-loader from 4.0.0 to 5.0.0 - Update css-minimizer-webpack-plugin from 3.2.0 to 7.0.0 Resolves #17138 - reduces vulnerabilities from 40 to 25 (37.5% reduction) All specific vulnerabilities mentioned in the issue are now resolved.
1 parent 6254386 commit a172dc8

File tree

2 files changed

+6701
-2473
lines changed

2 files changed

+6701
-2473
lines changed

0 commit comments

Comments
 (0)