Skip to content

Commit 9721a98

Browse files
authored
Bump JSON5 dependency to 2.2.2 to fix CVE-2022-46175 (#232)
* bump JSON5 dependency to 2.2.2 to fix CVE-2022-46175 * bump version to v.1.2 * Revert "bump version to v.1.2" This reverts commit 1603bab.
1 parent 1b71683 commit 9721a98

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@
4141
"typescript": "^4.5.2"
4242
},
4343
"dependencies": {
44-
"json5": "^2.2.1",
44+
"json5": "^2.2.2",
4545
"minimist": "^1.2.6",
4646
"strip-bom": "^3.0.0"
4747
},

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2848,10 +2848,10 @@ json5@^1.0.1:
28482848
dependencies:
28492849
minimist "^1.2.0"
28502850

2851-
json5@^2.2.1:
2852-
version "2.2.1"
2853-
resolved "https://registry.yarnpkg.com/json5/-/json5-2.2.1.tgz#655d50ed1e6f95ad1a3caababd2b0efda10b395c"
2854-
integrity sha512-1hqLFMSrGHRHxav9q9gNjJ5EXznIxGVO09xQRrwplcS8qs28pZ8s8hupZAmqDwZUmVZ2Qb2jnyPOWcDH8m8dlA==
2851+
json5@^2.2.2:
2852+
version "2.2.2"
2853+
resolved "https://registry.yarnpkg.com/json5/-/json5-2.2.2.tgz#64471c5bdcc564c18f7c1d4df2e2297f2457c5ab"
2854+
integrity sha512-46Tk9JiOL2z7ytNQWFLpj99RZkVgeHf87yGQKsIkaPz1qSH9UczKH1rO7K3wgRselo0tYMUNfecYpm/p1vC7tQ==
28552855

28562856
kleur@^3.0.3:
28572857
version "3.0.3"

0 commit comments

Comments
 (0)