Skip to content

Commit d24bacf

Browse files
committed
Update to ejs 3.1.10
This fixes CVE-2022-29078.
1 parent 65b5bff commit d24bacf

2 files changed

Lines changed: 37 additions & 11 deletions

File tree

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@
5050
"babel-loader": "^8.2.3",
5151
"babel-plugin-jsx-control-statements": "^4.0.0",
5252
"css-loader": "^2.1.0",
53-
"ejs": "^2.5.2",
53+
"ejs": "^3.1.10",
5454
"eslint": "^7.20.0",
5555
"eslint-config-prettier": "^9.1.0",
5656
"eslint-plugin-react": "^7.19.0",

yarn.lock

Lines changed: 36 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2821,16 +2821,16 @@ async@^2.6.4:
28212821
dependencies:
28222822
lodash "^4.17.14"
28232823

2824+
async@^3.2.3, async@~3.2.3:
2825+
version "3.2.5"
2826+
resolved "https://registry.yarnpkg.com/async/-/async-3.2.5.tgz#ebd52a8fdaf7a2289a24df399f8d8485c8a46b66"
2827+
integrity sha512-baNZyqaaLhyLVKm/DlvdW051MSgO6b8eVfIezl9E5PqWxFgzLm/wQntEW4zOytVburDEr0JlALEpdOFwvErLsg==
2828+
28242829
async@~0.2.10:
28252830
version "0.2.10"
28262831
resolved "https://registry.yarnpkg.com/async/-/async-0.2.10.tgz#b6bbe0b0674b9d719708ca38de8c237cb526c3d1"
28272832
integrity sha512-eAkdoKxU6/LkKDBzLpT+t6Ff5EtfSF4wx1WfJiPEEV7WNLnDaRXk0oVysiEPm262roaachGexwUv94WhSgN5TQ==
28282833

2829-
async@~3.2.3:
2830-
version "3.2.5"
2831-
resolved "https://registry.yarnpkg.com/async/-/async-3.2.5.tgz#ebd52a8fdaf7a2289a24df399f8d8485c8a46b66"
2832-
integrity sha512-baNZyqaaLhyLVKm/DlvdW051MSgO6b8eVfIezl9E5PqWxFgzLm/wQntEW4zOytVburDEr0JlALEpdOFwvErLsg==
2833-
28342834
asynckit@^0.4.0:
28352835
version "0.4.0"
28362836
resolved "https://registry.yarnpkg.com/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
@@ -3426,7 +3426,7 @@ chalk@^2.3.0, chalk@^2.4.2:
34263426
escape-string-regexp "^1.0.5"
34273427
supports-color "^5.3.0"
34283428

3429-
chalk@^4.0.0, chalk@^4.1.0:
3429+
chalk@^4.0.0, chalk@^4.0.2, chalk@^4.1.0:
34303430
version "4.1.2"
34313431
resolved "https://registry.yarnpkg.com/chalk/-/chalk-4.1.2.tgz#aac4e2b7734a740867aeb16bf02aad556a1e7a01"
34323432
integrity sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==
@@ -4682,10 +4682,12 @@ ee-first@1.1.1:
46824682
resolved "https://registry.yarnpkg.com/ee-first/-/ee-first-1.1.1.tgz#590c61156b0ae2f4f0255732a158b266bc56b21d"
46834683
integrity sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==
46844684

4685-
ejs@^2.5.2:
4686-
version "2.7.4"
4687-
resolved "https://registry.yarnpkg.com/ejs/-/ejs-2.7.4.tgz#48661287573dcc53e366c7a1ae52c3a120eec9ba"
4688-
integrity sha512-7vmuyh5+kuUyJKePhQfRQBhXV5Ce+RnaeeQArKu1EAMpL3WbgMt5WG6uQZpEVvYSSsxMXRKOewtDk9RaTKXRlA==
4685+
ejs@^3.1.10:
4686+
version "3.1.10"
4687+
resolved "https://registry.yarnpkg.com/ejs/-/ejs-3.1.10.tgz#69ab8358b14e896f80cc39e62087b88500c3ac3b"
4688+
integrity sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==
4689+
dependencies:
4690+
jake "^10.8.5"
46894691

46904692
electron-to-chromium@^1.4.668:
46914693
version "1.4.722"
@@ -5444,6 +5446,13 @@ file-uri-to-path@1.0.0:
54445446
resolved "https://registry.yarnpkg.com/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz#553a7b8446ff6f684359c445f1e37a05dacc33dd"
54455447
integrity sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==
54465448

5449+
filelist@^1.0.4:
5450+
version "1.0.4"
5451+
resolved "https://registry.yarnpkg.com/filelist/-/filelist-1.0.4.tgz#f78978a1e944775ff9e62e744424f215e58352b5"
5452+
integrity sha512-w1cEuf3S+DrLCQL7ET6kz+gmlJdbq9J7yXCSjK/OZCPA+qEN1WyF4ZAf0YYJa4/shHJra2t/d/r8SV4Ji+x+8Q==
5453+
dependencies:
5454+
minimatch "^5.0.1"
5455+
54475456
fill-range@^4.0.0:
54485457
version "4.0.0"
54495458
resolved "https://registry.yarnpkg.com/fill-range/-/fill-range-4.0.0.tgz#d544811d428f98eb06a63dc402d2403c328c38f7"
@@ -7075,6 +7084,16 @@ iterator.prototype@^1.1.2:
70757084
reflect.getprototypeof "^1.0.4"
70767085
set-function-name "^2.0.1"
70777086

7087+
jake@^10.8.5:
7088+
version "10.8.7"
7089+
resolved "https://registry.yarnpkg.com/jake/-/jake-10.8.7.tgz#63a32821177940c33f356e0ba44ff9d34e1c7d8f"
7090+
integrity sha512-ZDi3aP+fG/LchyBzUM804VjddnwfSfsdeYkwt8NcbKRvo4rFkjhs456iLFn3k2ZUWvNe4i48WACDbza8fhq2+w==
7091+
dependencies:
7092+
async "^3.2.3"
7093+
chalk "^4.0.2"
7094+
filelist "^1.0.4"
7095+
minimatch "^3.1.2"
7096+
70787097
javascript-natural-sort@^0.7.1:
70797098
version "0.7.1"
70807099
resolved "https://registry.yarnpkg.com/javascript-natural-sort/-/javascript-natural-sort-0.7.1.tgz#f9e2303d4507f6d74355a73664d1440fb5a0ef59"
@@ -7853,6 +7872,13 @@ minimatch@^3.0.4, minimatch@^3.1.1, minimatch@^3.1.2:
78537872
dependencies:
78547873
brace-expansion "^1.1.7"
78557874

7875+
minimatch@^5.0.1:
7876+
version "5.1.6"
7877+
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-5.1.6.tgz#1cfcb8cf5522ea69952cd2af95ae09477f122a96"
7878+
integrity sha512-lKwV/1brpG6mBUFHtb7NUmtABCb2WZZmm2wNiOA5hAb8VdCS4B3dtMWyvcoViccwAW/COERjXLt0zP1zXUN26g==
7879+
dependencies:
7880+
brace-expansion "^2.0.1"
7881+
78567882
minimist@1.2.8, minimist@^1.2.0, minimist@^1.2.6, minimist@^1.2.8, minimist@~1.2.8:
78577883
version "1.2.8"
78587884
resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.8.tgz#c1a464e7693302e082a075cee0c057741ac4772c"

0 commit comments

Comments
 (0)