linkerd
/
linkerd2
mirror of https://github.com/linkerd/linkerd2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix Dependabot alert for `node-forge` (#4978) 

Override the `node-forge` version requested by `webpack-dev-server/selfsigned` to `>=0.10.0` in order to address [CVE-2020-7720](https://github.com/advisories/GHSA-92xj-mqp7-vmcj).
This commit is contained in:
Alejandro Pedraza 2020-09-17 09:13:10 -05:00 committed by GitHub
parent 68582c5f5b
commit 7ab382c658
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
web/app/package.json
View File

@ -88,7 +88,8 @@
"webpack-dev-server": "3.11.0"
},
"resolutions": {
"@lingui/**/**/minimist": ">=1.2.5"
"@lingui/**/**/minimist": ">=1.2.5",
"webpack-dev-server/selfsigned/node-forge": ">=0.10.0"
},
"jest": {
"testEnvironment": "enzyme",

8
web/app/yarn.lock
View File

@ -8245,10 +8245,10 @@ node-fetch@1.6.3:
encoding "^0.1.11"
is-stream "^1.0.1"
node-forge@0.9.0:
version "0.9.0"
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.9.0.tgz#d624050edbb44874adca12bb9a52ec63cb782579"
integrity sha512-7ASaDa3pD+lJ3WvXFsxekJQelBKRpne+GOVbLbtHYdd7pFspyeuJHnWfLplGf3SwKGbfs/aYl5V/JCIaHVUKKQ==
node-forge@0.9.0, node-forge@>=0.10.0:
version "0.10.0"
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.10.0.tgz#32dea2afb3e9926f02ee5ce8794902691a676bf3"
integrity sha512-PPmu8eEeG9saEUvI97fm4OYxXVB6bFvyNTyiUOBichBpFG8A1Ljw3bY62+5oOjDEMHRnd0Y7HQ+x7uzxOzC6JA==
node-int64@^0.4.0:
version "0.4.0"