From ca8954c0cebff28419fd094fa5ffefb79aecb4ff Mon Sep 17 00:00:00 2001 From: Yavor Stoychev Date: Wed, 26 Oct 2022 16:44:13 +0300 Subject: [PATCH] bump minimatch version "A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service." Affected versions: < 3.0.5 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 8e23f2ea..95034ddb 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,7 @@ "eslint-utils": "^2.0.0", "ignore": "^5.1.1", "is-core-module": "^2.3.0", - "minimatch": "^3.0.4", + "minimatch": "^3.0.5", "resolve": "^1.10.1", "semver": "^6.1.0" },