robojerk/codeql-action

Require xml2js >=0.5.0 to address CVE-2023-0842

Browse source
This commit is contained in:
Henry Mercer 2023-04-11 13:33:36 +01:00
parent 9c13316a15
commit c2b5d643fd
6 changed files with 45 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

6
node_modules/.package-lock.json generated vendored
View file

@ -6045,9 +6045,9 @@
}
},
"node_modules/xml2js": {
"version": "0.4.23",
"resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.23.tgz",
"integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==",
"version": "0.5.0",
"resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz",
"integrity": "sha512-drPFnkQJik/O+uPKpqSgr22mpuFHqKdbS835iAQrUC73L2F5WkboIRd63ai/2Yg6I1jzifPFKH2NTK+cfglkIA==",
"dependencies": {
"sax": ">=0.6.0",
"xmlbuilder": "~11.0.0"