Skip to content

Commit 2dc37ae

Browse files
committed
bug #975 Resolve security issue CVE-2021-23369 (elghailani)
This PR was squashed before being merged into the main branch. Discussion ---------- Resolve security issue CVE-2021-23369 This PR resolve the newly published critical security issue [CVE-2021-23369 : Remote code execution in handlebars when compiling templates](GHSA-f2jv-r9rf-7988) Commits ------- 8a308c0 Resolve security issue CVE-2021-23369
2 parents cc022fd + 8a308c0 commit 2dc37ae

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@
7474
"file-loader": "^6.0.0",
7575
"fork-ts-checker-webpack-plugin": "^5.0.0 || ^6.0.0",
7676
"fs-extra": "^9.0.0",
77-
"handlebars": "^4.0.11",
77+
"handlebars": "^4.7.7",
7878
"handlebars-loader": "^1.7.0",
7979
"http-server": "^0.12.3",
8080
"less": "^4.0.0",

yarn.lock

+1-1
Original file line numberDiff line numberDiff line change
@@ -3694,7 +3694,7 @@ handlebars-loader@^1.7.0:
36943694
loader-utils "1.0.x"
36953695
object-assign "^4.1.0"
36963696

3697-
handlebars@^4.0.11:
3697+
handlebars@^4.7.7:
36983698
version "4.7.7"
36993699
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.7.tgz#9ce33416aad02dbd6c8fafa8240d5d98004945a1"
37003700
integrity sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA==

0 commit comments

Comments
 (0)