Commit 14dfe52
committed
fix(appsec): force js-yaml resolution to >=4.3.1 for wasm-js-rewriter (GHSA-5p4m-2wfm-xmqj)
@datadog/wasm-js-rewriter@5.0.2 only loosened its own js-yaml range to
^4.1.1, which still permits resolving the vulnerable 4.1.x-4.3.0 range.
Add a yarn resolution scoped to that dependency edge so it resolves to
the patched 4.3.1 instead.1 parent 4e9f842 commit 14dfe52
2 files changed
Lines changed: 7 additions & 4 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
253 | 253 | | |
254 | 254 | | |
255 | 255 | | |
| 256 | + | |
| 257 | + | |
| 258 | + | |
256 | 259 | | |
257 | 260 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2854 | 2854 | | |
2855 | 2855 | | |
2856 | 2856 | | |
2857 | | - | |
2858 | | - | |
2859 | | - | |
2860 | | - | |
| 2857 | + | |
| 2858 | + | |
| 2859 | + | |
| 2860 | + | |
2861 | 2861 | | |
2862 | 2862 | | |
2863 | 2863 | | |
| |||
0 commit comments