fix(Code Node): Update vm2 to address CVE-2023-29017 (#5947)

Update vm2 to fix CVE-2023-29017

GH advisory: https://github.com/advisories/GHSA-7jxr-cg7f-gpgv

Co-authored-by: Loganaden Velvindron <logan@cyberstorm.mu>
This commit is contained in:
कारतोफ्फेलस्क्रिप्ट™ 2023-04-11 15:05:38 +02:00 committed by GitHub
parent 0570514b78
commit f0eba0a2f3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 14 deletions

View file

@ -900,7 +900,7 @@
"ssh2-sftp-client": "^7.0.0", "ssh2-sftp-client": "^7.0.0",
"tmp-promise": "^3.0.2", "tmp-promise": "^3.0.2",
"uuid": "^8.3.2", "uuid": "^8.3.2",
"vm2": "~3.9.5", "vm2": "~3.9.15",
"xlsx": "^0.17.0", "xlsx": "^0.17.0",
"xml2js": "^0.4.23" "xml2js": "^0.4.23"
} }

View file

@ -1404,8 +1404,8 @@ importers:
specifier: ^8.3.2 specifier: ^8.3.2
version: 8.3.2 version: 8.3.2
vm2: vm2:
specifier: ~3.9.5 specifier: ~3.9.15
version: 3.9.11 version: 3.9.15
xlsx: xlsx:
specifier: ^0.17.0 specifier: ^0.17.0
version: 0.17.5 version: 0.17.5
@ -7646,17 +7646,10 @@ packages:
hasBin: true hasBin: true
dev: true dev: true
/acorn@8.8.0:
resolution: {integrity: sha512-QOxyigPVrpZ2GXT+PFyZTl6TtOFc5egxHIP9IlQ+RbupQuX4RkT/Bee4/kQuC02Xkzg84JcT7oLYtDIQxp+v7w==}
engines: {node: '>=0.4.0'}
hasBin: true
dev: false
/acorn@8.8.1: /acorn@8.8.1:
resolution: {integrity: sha512-7zFpHzhnqYKrkYdUjF1HI1bzd0VygEGX8lFk4k5zVMqHEoES+P+7TKI+EvLO9WVMJ8eekdO0aDEK044xTXwPPA==} resolution: {integrity: sha512-7zFpHzhnqYKrkYdUjF1HI1bzd0VygEGX8lFk4k5zVMqHEoES+P+7TKI+EvLO9WVMJ8eekdO0aDEK044xTXwPPA==}
engines: {node: '>=0.4.0'} engines: {node: '>=0.4.0'}
hasBin: true hasBin: true
dev: true
/address@1.2.1: /address@1.2.1:
resolution: {integrity: sha512-B+6bi5D34+fDYENiH5qOlA0cV2rAGKuWZ9LeyUUehbXy8e0VS9e498yO0Jeeh+iM+6KbfudHTFjXw2MmJD4QRA==} resolution: {integrity: sha512-B+6bi5D34+fDYENiH5qOlA0cV2rAGKuWZ9LeyUUehbXy8e0VS9e498yO0Jeeh+iM+6KbfudHTFjXw2MmJD4QRA==}
@ -10366,7 +10359,7 @@ packages:
ast-types: 0.13.4 ast-types: 0.13.4
escodegen: 1.14.3 escodegen: 1.14.3
esprima: 4.0.1 esprima: 4.0.1
vm2: 3.9.11 vm2: 3.9.15
dev: false dev: false
/del@6.1.1: /del@6.1.1:
@ -21416,12 +21409,12 @@ packages:
- terser - terser
dev: true dev: true
/vm2@3.9.11: /vm2@3.9.15:
resolution: {integrity: sha512-PFG8iJRSjvvBdisowQ7iVF580DXb1uCIiGaXgm7tynMR1uTBlv7UJlB1zdv5KJ+Tmq1f0Upnj3fayoEOPpCBKg==} resolution: {integrity: sha512-XqNqknHGw2avJo13gbIwLNZUumvrSHc9mLqoadFZTpo3KaNEJoe1I0lqTFhRXmXD7WkLyG01aaraXdXT0pa4ag==}
engines: {node: '>=6.0'} engines: {node: '>=6.0'}
hasBin: true hasBin: true
dependencies: dependencies:
acorn: 8.8.0 acorn: 8.8.1
acorn-walk: 8.2.0 acorn-walk: 8.2.0
dev: false dev: false