Skip to content

Commit 8882f1d

Browse files
authored
Fix yaml vulnerability (#2785)
Bump yaml package version to 2.2.2 to address unhandled exception [CVE-2023-2251](https://nvd.nist.gov/vuln/detail/CVE-2023-2251) More details on GHSA-f9xv-q969-pqx4
1 parent 056d487 commit 8882f1d

File tree

2 files changed

+5
-4
lines changed

2 files changed

+5
-4
lines changed

portal-ui/package.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -94,6 +94,7 @@
9494
},
9595
"resolutions": {
9696
"nth-check": "^2.0.1",
97+
"yaml": "^2.2.2",
9798
"postcss": "^8.2.13",
9899
"react-scripts/**/node-forge": "^1.3.0",
99100
"react-scripts/**/async": "^2.6.4",

portal-ui/yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12810,10 +12810,10 @@ yallist@^4.0.0:
1281012810
resolved "https://registry.yarnpkg.com/yallist/-/yallist-4.0.0.tgz#9bb92790d9c0effec63be73519e11a35019a3a72"
1281112811
integrity sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==
1281212812

12813-
yaml@^1.10.0, yaml@^1.10.2, yaml@^1.7.2:
12814-
version "1.10.2"
12815-
resolved "https://registry.yarnpkg.com/yaml/-/yaml-1.10.2.tgz#2301c5ffbf12b467de8da2333a459e29e7920e4b"
12816-
integrity sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==
12813+
yaml@^1.10.0, yaml@^1.10.2, yaml@^1.7.2, yaml@^2.2.2:
12814+
version "2.2.2"
12815+
resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.2.2.tgz#ec551ef37326e6d42872dad1970300f8eb83a073"
12816+
integrity sha512-CBKFWExMn46Foo4cldiChEzn7S7SRV+wqiluAb6xmueD/fGyRHIhX8m14vVGgeFWjN540nKCNVj6P21eQjgTuA==
1281712817

1281812818
yargs-parser@^18.1.2:
1281912819
version "18.1.3"

0 commit comments

Comments
 (0)