Skip to content

Commit d13a268

Browse files
authored
fix: d3-color redos version patch (#331)
overrides the version of d3-color used by d3-scale -> d3-interpolate to use 3.1.0, which remediates https://security.snyk.io/vuln/SNYK-JS-D3COLOR-1076592
1 parent fb23eb3 commit d13a268

File tree

2 files changed

+8
-5
lines changed

2 files changed

+8
-5
lines changed

package.json

+4-1
Original file line numberDiff line numberDiff line change
@@ -138,5 +138,8 @@
138138
"d3-time": "^2.1.1",
139139
"d3-time-format": "^4.1.0",
140140
"ts-toolbelt": "^9.6.0"
141+
},
142+
"resolutions": {
143+
"d3-scale/d3-interpolate/d3-color": "^3.1.0"
141144
}
142-
}
145+
}

yarn.lock

+4-4
Original file line numberDiff line numberDiff line change
@@ -2523,10 +2523,10 @@ d3-array@2, d3-array@^2.12.1, d3-array@^2.3.0:
25232523
dependencies:
25242524
internmap "1 - 2"
25252525

2526-
"d3-color@1 - 2":
2527-
version "2.0.0"
2528-
resolved "https://registry.npmjs.org/d3-color/-/d3-color-2.0.0.tgz"
2529-
integrity sha512-SPXi0TSKPD4g9tw0NMZFnR95XVgUZiBH+uUTqQuDu1OsE2zomHU7ho0FISciaPvosimixwHFl3WHLGabv6dDgQ==
2526+
"d3-color@1 - 2", d3-color@^3.1.0:
2527+
version "3.1.0"
2528+
resolved "https://registry.yarnpkg.com/d3-color/-/d3-color-3.1.0.tgz#395b2833dfac71507f12ac2f7af23bf819de24e2"
2529+
integrity sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==
25302530

25312531
25322532
version "5.3.0"

0 commit comments

Comments
 (0)