actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #850 from actions/ahmed3lmallah/adressing-CVE-2024-21538

Browse Source 
Overriding the cross-spawn dependency to use a safe version
This commit is contained in:
Ahmed ElMallah
2024-11-19 14:42:32 -08:00
committed by GitHub
parent b02ea3a88b 2fc8e23b12
commit 9192be9c72
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package-lock.json
Generated
+3 -3
View File
@@ -3187,9 +3187,9 @@
} }
}, },
"node_modules/cross-spawn": { "node_modules/cross-spawn": {
"version": "7.0.3", "version": "7.0.6",
"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
"integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
"dependencies": { "dependencies": {
"path-key": "^3.1.0", "path-key": "^3.1.0",
"shebang-command": "^2.0.0", "shebang-command": "^2.0.0",
package.json
+3
View File
@@ -57,5 +57,8 @@
"nodemon": "^3.1.7", "nodemon": "^3.1.7",
"prettier": "3.2.5", "prettier": "3.2.5",
"typescript": "^5.4.5" "typescript": "^5.4.5"
},
"overrides": {
"cross-spawn": ">=7.0.5"
} }
} }