Skip to content

Commit 87fc1db

Browse files
chore(deps): update dependency babel-loader to v9.2.1 (#1121)
* chore(deps): update dependency babel-loader to v9.2.1 * Bump version of formidable to get rid of vuln error * Bump version of superagent which has latest version of dependency called formidable to get rid of vulnerability * Add suppression for formidable --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Dawid Strozak <[email protected]>
1 parent 47e02b2 commit 87fc1db

File tree

5 files changed

+233
-64
lines changed

5 files changed

+233
-64
lines changed

.pnp.cjs

Lines changed: 113 additions & 29 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package-lock.json

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@
5959
"stylelint": "^16.0.0",
6060
"stylelint-config-standard": "^36.0.0",
6161
"stylelint-config-standard-scss": "^13.0.0",
62-
"superagent": "^10.2.0",
62+
"superagent": "^10.2.1",
6363
"ts-node": "10.9.1",
6464
"tsconfig-paths": "4.2.0",
6565
"typescript": "5.0.4"
@@ -81,7 +81,7 @@
8181
"@typescript-eslint/eslint-plugin": "^6.0.0",
8282
"@typescript-eslint/parser": "^6.0.0",
8383
"axios-debug-log": "1.0.0",
84-
"babel-loader": "9.1.2",
84+
"babel-loader": "9.2.1",
8585
"chai": "4.3.7",
8686
"chai-as-promised": "7.1.2",
8787
"codeceptjs": "^3.3.6",

yarn-audit-known-issues

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
{"value":"@types/helmet","children":{"ID":"@types/helmet (deprecation)","Issue":"This is a stub types definition. helmet provides its own type definitions, so you do not need this installed.","Severity":"moderate","Vulnerable Versions":"4.0.0","Tree Versions":["4.0.0"],"Dependents":["rpe-expressjs-template@workspace:."]}}
22
{"value":"axios","children":{"ID":1103618,"Issue":"axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL","URL":"https://github.com/advisories/GHSA-jr5f-v2jv-69x6","Severity":"high","Vulnerable Versions":">=1.0.0 <1.8.2","Tree Versions":["1.7.4"],"Dependents":["rpe-expressjs-template@workspace:."]}}
33
{"value":"cookie","children":{"ID":1103907,"Issue":"cookie accepts cookie name, path, and domain with out of bounds characters","URL":"https://github.com/advisories/GHSA-pxg6-pf52-xh8x","Severity":"low","Vulnerable Versions":"<0.7.0","Tree Versions":["0.4.0"],"Dependents":["csurf@npm:1.11.0"]}}
4-
{"value":"csurf","children":{"ID":"csurf (deprecation)","Issue":"Please use another csrf package","Severity":"moderate","Vulnerable Versions":"1.11.0","Tree Versions":["1.11.0"],"Dependents":["rpe-expressjs-template@workspace:."]}}
4+
{"value":"csurf","children":{"ID":"csurf (deprecation)","Issue":"This package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions","Severity":"moderate","Vulnerable Versions":"1.11.0","Tree Versions":["1.11.0"],"Dependents":["rpe-expressjs-template@workspace:."]}}
5+
{"value":"formidable","children":{"ID":1105075,"Issue":"Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content","URL":"https://github.com/advisories/GHSA-75v8-2h7p-7m2m","Severity":"low","Vulnerable Versions":">=3.1.1-canary.20211030 <3.5.3","Tree Versions":["3.5.2"],"Dependents":["superagent@npm:9.0.2"]}}

0 commit comments

Comments
 (0)