Skip to content

Commit

Permalink
[build] Fix vulnerability in jsonpath-plus <10.0.0
Browse files Browse the repository at this point in the history 
See: [JSONPath Plus Remote Code Execution (RCE) Vulnerability #69](https://github.com/redhat-developer/vscode-openshift-tools/security/dependabot/69)

```
jsonpath-plus  <10.0.0
Severity: critical
JSONPath Plus Remote Code Execution (RCE) Vulnerability - GHSA-pppg-cpfq-h7wr
fix available via `npm audit fix`
node_modules/jsonpath-plus
  @kubernetes/client-node  <=1.0.0-rc6
  Depends on vulnerable versions of jsonpath-plus
  Depends on vulnerable versions of request
  node_modules/@kubernetes/client-node
```

Fixes: https://github.com/redhat-developer/vscode-openshift-tools/security/dependabot/69

Signed-off-by: Victor Rubezhny <[email protected]>
  • Loading branch information
@vrubezhny
vrubezhny committed Oct 15, 2024
1 parent a0adf1e commit cd48ef6
Showing 1 changed file with 15 additions and 10 deletions.
25 changes: 15 additions & 10 deletions package-lock.json
View file

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

0 comments on commit cd48ef6

Please sign in to comment.