Skip to content

Commit 0aea476

Browse files
pirtleshellpirtleshell
authored
fix patch version security vulnerabilities (#1204)
* use chalk in place of react-dev-tools/chalk * fix patch version security vulnerabilities fixes the lowest of hanging fruit vulnerabilities. brings total number of api audit vulnerabilities from 70 to 21. [gh-1203] * revert change to libxmljs has problem with latest build.
1 parent 26593bd commit 0aea476

File tree

10 files changed

+641
-615
lines changed

10 files changed

+641
-615
lines changed

‎api/.tool-versions‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
nodejs 11.4.0

‎api/package-lock.json‎

Lines changed: 595 additions & 605 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎api/package.json‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@
2929
"@types/express": "^4.16.1",
3030
"@types/express-fileupload": "^1.1.0",
3131
"@types/express-session": "^1.15.12",
32-
"aws-sdk": "^2.449.0",
32+
"aws-sdk": "^2.1135.0",
3333
"bcryptjs": "^2.4.3",
3434
"bull": "^3.15.0",
3535
"chai": "^4.2.0",
@@ -41,24 +41,24 @@
4141
"dateformat": "^3.0.3",
4242
"debug": "~2.6.9",
4343
"express": "~4.16.0",
44-
"express-fileupload": "1.1.6",
44+
"express-fileupload": "^1.3.1",
4545
"express-session": "^1.15.6",
4646
"flash": "^1.1.0",
4747
"http-errors": "~1.6.2",
4848
"ioredis": "^4.9.0",
4949
"json2csv": "^4.5.3",
5050
"jsonwebtoken": "^8.5.1",
5151
"morgan": "~1.9.0",
52-
"node-fetch": "^2.6.0",
52+
"node-fetch": "^2.6.7",
5353
"pg": "^7.9.0",
5454
"pg-hstore": "^2.3.2",
5555
"reflect-metadata": "^0.1.13",
5656
"request": "^2.88.0",
5757
"swagger-jsdoc": "^3.3.0",
58-
"swagger-ui-express": "^4.0.7",
58+
"swagger-ui-express": "^4.4.0",
5959
"ts-node": "3.3.0",
6060
"tsconfig-paths": "3.8.0",
61-
"typeorm": "^0.2.16",
61+
"typeorm": "^0.2.45",
6262
"typescript": "3.5.3"
6363
},
6464
"devDependencies": {

‎app/.tool-versions‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
nodejs 11.4.0

‎app/Dockerfile‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,4 +9,3 @@ COPY . /app
99

1010
EXPOSE 4000
1111
CMD ["yarn", "start"]
12-

‎app/config/modules.js‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
const fs = require('fs');
44
const path = require('path');
55
const paths = require('./paths');
6-
const chalk = require('react-dev-utils/chalk');
6+
const chalk = require('chalk');
77

88
/**
99
* Get the baseUrl of a compilerOptions object.

‎app/package.json‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@
2626
"babel-preset-react-app": "^9.0.0",
2727
"camelcase": "^5.2.0",
2828
"case-sensitive-paths-webpack-plugin": "2.2.0",
29+
"chalk": "4",
2930
"clsx": "^1.0.4",
3031
"connected-react-router": "^6.5.2",
3132
"css-loader": "2.1.1",

‎app/scripts/build.js‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ require('../config/env');
1616

1717

1818
const path = require('path');
19-
const chalk = require('react-dev-utils/chalk');
19+
const chalk = require('chalk');
2020
const fs = require('fs-extra');
2121
const webpack = require('webpack');
2222
const configFactory = require('../config/webpack.config');

‎app/scripts/start.js‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ require('../config/env');
1616

1717

1818
const fs = require('fs');
19-
const chalk = require('react-dev-utils/chalk');
19+
const chalk = require('chalk');
2020
const webpack = require('webpack');
2121
const WebpackDevServer = require('webpack-dev-server');
2222
const clearConsole = require('react-dev-utils/clearConsole');

‎app/yarn.lock‎

Lines changed: 35 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2858,6 +2858,13 @@ ansi-styles@^3.2.0, ansi-styles@^3.2.1:
28582858
dependencies:
28592859
color-convert "^1.9.0"
28602860

2861+
ansi-styles@^4.1.0:
2862+
version "4.3.0"
2863+
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-4.3.0.tgz#edd803628ae71c04c85ae7a0906edad34b648937"
2864+
integrity sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==
2865+
dependencies:
2866+
color-convert "^2.0.1"
2867+
28612868
ansicolors@~0.2.1:
28622869
version "0.2.1"
28632870
resolved "https://registry.yarnpkg.com/ansicolors/-/ansicolors-0.2.1.tgz#be089599097b74a5c9c4a84a0cdbcdb62bd87aef"
@@ -4443,6 +4450,14 @@ [email protected], chalk@^2.0.0, chalk@^2.0.1, chalk@^2.1.0, chalk@^2.4.1, chalk@^2.4.
44434450
escape-string-regexp "^1.0.5"
44444451
supports-color "^5.3.0"
44454452

4453+
chalk@4:
4454+
version "4.1.2"
4455+
resolved "https://registry.yarnpkg.com/chalk/-/chalk-4.1.2.tgz#aac4e2b7734a740867aeb16bf02aad556a1e7a01"
4456+
integrity sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==
4457+
dependencies:
4458+
ansi-styles "^4.1.0"
4459+
supports-color "^7.1.0"
4460+
44464461
chalk@^1.1.3:
44474462
version "1.1.3"
44484463
resolved "https://registry.yarnpkg.com/chalk/-/chalk-1.1.3.tgz#a8115c55e4a702fe4d150abd3872822a7e09fc98"
@@ -4667,12 +4682,19 @@ color-convert@^1.9.0, color-convert@^1.9.1:
46674682
dependencies:
46684683
color-name "1.1.3"
46694684

4685+
color-convert@^2.0.1:
4686+
version "2.0.1"
4687+
resolved "https://registry.yarnpkg.com/color-convert/-/color-convert-2.0.1.tgz#72d3a68d598c9bdb3af2ad1e84f21d896abd4de3"
4688+
integrity sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==
4689+
dependencies:
4690+
color-name "~1.1.4"
4691+
46704692
[email protected]:
46714693
version "1.1.3"
46724694
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.3.tgz#a7d0558bd89c42f795dd42328f740831ca53bc25"
46734695
integrity sha1-p9BVi9icQveV3UIyj3QIMcpTvCU=
46744696

4675-
color-name@^1.0.0:
4697+
color-name@^1.0.0, color-name@~1.1.4:
46764698
version "1.1.4"
46774699
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.4.tgz#c2a09a87acbde69543de6f63fa3995c826c536a2"
46784700
integrity sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==
@@ -7636,6 +7658,11 @@ has-flag@^3.0.0:
76367658
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-3.0.0.tgz#b5d454dc2199ae225699f3467e5a07f3b955bafd"
76377659
integrity sha1-tdRU3CGZriJWmfNGfloH87lVuv0=
76387660

7661+
has-flag@^4.0.0:
7662+
version "4.0.0"
7663+
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-4.0.0.tgz#944771fd9c81c81265c4d6941860da06bb59479b"
7664+
integrity sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==
7665+
76397666
has-symbols@^1.0.0, has-symbols@^1.0.1:
76407667
version "1.0.1"
76417668
resolved "https://registry.yarnpkg.com/has-symbols/-/has-symbols-1.0.1.tgz#9f5214758a44196c406d9bd76cebf81ec2dd31e8"
@@ -14365,6 +14392,13 @@ supports-color@^6.1.0:
1436514392
dependencies:
1436614393
has-flag "^3.0.0"
1436714394

14395+
supports-color@^7.1.0:
14396+
version "7.2.0"
14397+
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-7.2.0.tgz#1b7dcdcb32b8138801b3e478ba6a51caa89648da"
14398+
integrity sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==
14399+
dependencies:
14400+
has-flag "^4.0.0"
14401+
1436814402
svgo@^1.0.0, svgo@^1.2.2:
1436914403
version "1.2.2"
1437014404
resolved "https://registry.yarnpkg.com/svgo/-/svgo-1.2.2.tgz#0253d34eccf2aed4ad4f283e11ee75198f9d7316"

0 commit comments

Comments
 (0)