Skip to content

Commit 7b53e1b

Browse files
committed
fix(security): Cross-site Scripting (XSS) for readme
High severity vulnerability found in dompurify Description: Cross-site Scripting (XSS) Info: https://snyk.io/vuln/SNYK-JS-DOMPURIFY-468981 Introduced through: @verdaccio/readme@8.1.0 From: @verdaccio/readme@8.1.0 > dompurify@1.0.11
1 parent 4012c84 commit 7b53e1b

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

core/readme/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@
3030
"lib"
3131
],
3232
"dependencies": {
33-
"dompurify": "2.0.1",
33+
"dompurify": "2.0.3",
3434
"jsdom": "15.1.1",
3535
"marked": "0.6.2"
3636
},

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4116,10 +4116,10 @@ domexception@^1.0.1:
41164116
dependencies:
41174117
webidl-conversions "^4.0.2"
41184118

4119-
dompurify@2.0.1:
4120-
version "2.0.1"
4121-
resolved "https://registry.verdaccio.org/dompurify/-/dompurify-2.0.1.tgz#02e927c164393213f11a288eea154f105ee33349"
4122-
integrity sha512-57cdUdCG300XfdO+BTYfgBtcP0G6LuwnQ8BZQ2t9wFDIa+DoQT9iaxKox5aJJYovAA3B4wNIeNlqBfnS/OWvRQ==
4119+
dompurify@2.0.3:
4120+
version "2.0.3"
4121+
resolved "https://registry.verdaccio.org/dompurify/-/dompurify-2.0.3.tgz#5cc4965a487d54aedba6ba9634b137cfbd7eb50d"
4122+
integrity sha512-q006uOkD2JGSJgF0qBt7rVhUvUPBWCxpGayALmHvXx2iNlMfNVz7PDGeXEUjNGgIDjADz59VZCv6UE3U8XRWVw==
41234123

41244124
dot-prop@^3.0.0:
41254125
version "3.0.0"

0 commit comments

Comments
 (0)