jens/flipper
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix node-fetch, node-forge sec vulns (#1530)

Browse Source 
Summary:
You know the drill.

Pull Request resolved: https://github.com/facebook/flipper/pull/1530

Test Plan: Checked that `yarn.lock` references the respective new versions.

Reviewed By: nikoant

Differential Revision: D23733338

Pulled By: passy

fbshipit-source-id: abf9812b977542a8b297b88ea16c7c01a062898b
This commit is contained in:
Pascal Hartig
2020-09-17 05:01:49 -07:00
committed by Facebook GitHub Bot
parent 48ac2df956
commit 2fbd5f6576
8 changed files with 28 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
desktop/package.json
View File

@@ -106,7 +106,8 @@
"**/metro/**/ws": "1.1.5",
"ws": "7.3.0",
"kind-of": "6.0.3",
"bl": "4.0.3"
"bl": "4.0.3",
"node-forge": "^0.10.0"
},
"devDependencies": {
"@babel/code-frame": "^7.10.4",

8
desktop/yarn.lock
View File

@@ -9175,10 +9175,10 @@ node-fetch@^2.6.1:
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.1.tgz#045bd323631f76ed2e2b55573394416b639a0052"
integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw==
node-forge@^0.7.1, node-forge@^0.7.5:
version "0.7.6"
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.7.6.tgz#fdf3b418aee1f94f0ef642cd63486c77ca9724ac"
integrity sha512-sol30LUpz1jQFBjOKwbjxijiE3b6pjd74YwfD0fJOKPjF+fONKb2Yg8rYgS6+bK6VDl+/wfr4IYpC7jDzLUIfw==
node-forge@^0.10.0, node-forge@^0.7.1, node-forge@^0.7.5:
version "0.10.0"
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.10.0.tgz#32dea2afb3e9926f02ee5ce8794902691a676bf3"
integrity sha512-PPmu8eEeG9saEUvI97fm4OYxXVB6bFvyNTyiUOBichBpFG8A1Ljw3bY62+5oOjDEMHRnd0Y7HQ+x7uzxOzC6JA==
node-int64@^0.4.0:
version "0.4.0"