Skip to content

Commit a6473d6

Browse files
authored
chore(deps): bump shell-quote to >=1.8.4 via pnpm override (#4991)
Resolves critical CVE in shell-quote — quote() did not escape newlines in object .op values, allowing shell injection. Fixed in 1.8.4. Transitive dev dep via @docusaurus/core → webpack-dev-server → launch-editor@2.13.2.
1 parent 0be44ad commit a6473d6

2 files changed

Lines changed: 4 additions & 8 deletions

File tree

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,8 @@
114114
"js-yaml": ">=4.1.1",
115115
"gray-matter>js-yaml": "^3.14.1",
116116
"lodash": ">=4.18.0",
117-
"webpackbar": "^7.0.0"
117+
"webpackbar": "^7.0.0",
118+
"shell-quote": ">=1.8.4"
118119
}
119120
}
120121
}

pnpm-lock.yaml

Lines changed: 2 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)