robojerk/codeql-action

Require xml2js >=0.5.0 to address CVE-2023-0842

Browse source
This commit is contained in:
Henry Mercer 2023-04-11 13:33:36 +01:00
parent 9c13316a15
commit c2b5d643fd
6 changed files with 45 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

3
package.json
View file

@ -73,5 +73,8 @@
"removeNPMAbsolutePaths": "3.0.0",
"sinon": "^15.0.1",
"typescript": "^5.0.2"
},
"overrides": {
"xml2js": ">=0.5.0"
}
}