From 838fe957532aa74869766256cc183eeb498f8af8 Mon Sep 17 00:00:00 2001 From: Dan J Miller Date: Wed, 5 May 2021 12:02:41 -0230 Subject: [PATCH] Fix dependency vulnerability by upgrading xmlhttprequest-ssl via yarn.lock (#10990) --- package.json | 1 + yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index d54fac03c..576c1c7ee 100644 --- a/package.json +++ b/package.json @@ -72,6 +72,7 @@ "**/redux/symbol-observable": "^2.0.3", "**/redux-devtools-instrument/symbol-observable": "^2.0.3", "**/rxjs/symbol-observable": "^2.0.3", + "**/xmlhttprequest-ssl": "^1.6.2", "3box/ipfs/ipld-zcash/zcash-bitcore-lib/lodash": "^4.17.19", "3box/ipfs/ipld-zcash/zcash-bitcore-lib/elliptic": "^6.5.4", "3box/**/libp2p-crypto/node-forge": "^0.10.0", diff --git a/yarn.lock b/yarn.lock index 534f11a37..6f4ad3f6c 100644 --- a/yarn.lock +++ b/yarn.lock @@ -27334,10 +27334,10 @@ xmlchars@^2.2.0: resolved "https://registry.yarnpkg.com/xmlchars/-/xmlchars-2.2.0.tgz#060fe1bcb7f9c76fe2a17db86a9bc3ab894210cb" integrity sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw== -xmlhttprequest-ssl@~1.5.4: - version "1.5.5" - resolved "https://registry.yarnpkg.com/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.5.5.tgz#c2876b06168aadc40e57d97e81191ac8f4398b3e" - integrity sha1-wodrBhaKrcQOV9l+gRkayPQ5iz4= +xmlhttprequest-ssl@^1.6.2, xmlhttprequest-ssl@~1.5.4: + version "1.6.2" + resolved "https://registry.yarnpkg.com/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.6.2.tgz#dd6899bfbcf684b554e393c30b13b9f3b001a7ee" + integrity sha512-tYOaldF/0BLfKuoA39QMwD4j2m8lq4DIncqj1yuNELX4vz9+z/ieG/vwmctjJce+boFHXstqhWnHSxc4W8f4qg== xmlhttprequest@*, xmlhttprequest@1.8.0, xmlhttprequest@^1.8.0: version "1.8.0"