From 6a2c14fe1aeb03c886f699552a42dc5bdced0f9c Mon Sep 17 00:00:00 2001 From: Andreas Stassivik Date: Mon, 11 Nov 2024 20:16:27 -0800 Subject: [PATCH] npm overrides `cross-spawn@^7.0.5` to mitigate https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230 --- package-lock.json | 6 +++--- package.json | 3 +++ 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 8a032f5..c07aad7 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4244,9 +4244,9 @@ } }, "node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.5", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.5.tgz", + "integrity": "sha512-ZVJrKKYunU38/76t0RMOulHOnUcbU9GbpWKAOZ0mhjr7CX6FVrH+4FrAapSOekrgFQ3f/8gwMEuIft0aKq6Hug==", "license": "MIT", "dependencies": { "path-key": "^3.1.0", diff --git a/package.json b/package.json index b6bc761..a215aac 100644 --- a/package.json +++ b/package.json @@ -133,5 +133,8 @@ "launchTimeout": 10000, "port": 3001 } + }, + "overrides": { + "cross-spawn": "^7.0.5" } }