Merge pull request #850 from actions/ahmed3lmallah/adressing-CVE-2024-21538

Overriding the cross-spawn dependency to use a safe version
This commit is contained in:
Ahmed ElMallah
2024-11-19 14:42:32 -08:00
committed by GitHub
2 changed files with 6 additions and 3 deletions
+3 -3
View File
@@ -3187,9 +3187,9 @@
}
},
"node_modules/cross-spawn": {
"version": "7.0.3",
"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
"integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
"version": "7.0.6",
"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
"integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
"dependencies": {
"path-key": "^3.1.0",
"shebang-command": "^2.0.0",
+3
View File
@@ -57,5 +57,8 @@
"nodemon": "^3.1.7",
"prettier": "3.2.5",
"typescript": "^5.4.5"
},
"overrides": {
"cross-spawn": ">=7.0.5"
}
}