Skip to content

Commit c117307

Browse files
fix: add npm override for js-yaml to resolve security vulnerability
- Add js-yaml ^4.1.1 to package.json overrides - Fixes prototype pollution vulnerability (GHSA-mh29-5h37-fv8m) in js-yaml <4.1.1 - Forces all transitive dependencies to use the patched version - Resolves conflict between js-yaml 3.x (via @codeceptjs/detox-helper) and 4.x - All tests passing (unit and runner tests verified)
1 parent f217ab8 commit c117307

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -198,6 +198,7 @@
198198
}
199199
},
200200
"overrides": {
201-
"tmp": "0.2.5"
201+
"tmp": "0.2.5",
202+
"js-yaml": "^4.1.1"
202203
}
203204
}

0 commit comments

Comments
 (0)