From 3f6ea3fd8fbe666bffff0bc6fb968e5f8b0577e1 Mon Sep 17 00:00:00 2001 From: garritfra <32395585+garritfra@users.noreply.github.com> Date: Wed, 24 Jan 2018 20:52:39 +0100 Subject: [PATCH 1/2] update static-module version to 2.0.0 -> fix static-eval vulnerability --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 7e5f660..edfc0a8 100644 --- a/package.json +++ b/package.json @@ -9,7 +9,7 @@ "dependencies": { "quote-stream": "^1.0.1", "resolve": "^1.1.5", - "static-module": "^1.3.2", + "static-module": "^2.0.0", "through2": "^2.0.0" }, "devDependencies": { From ffe02cdfe0abfa27337b73a40afb4bda473e3473 Mon Sep 17 00:00:00 2001 From: Yoshua Wuyts Date: Tue, 30 Jan 2018 10:59:51 +0100 Subject: [PATCH 2/2] 2.1.1 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index edfc0a8..66ca8c9 100644 --- a/package.json +++ b/package.json @@ -9,7 +9,7 @@ "dependencies": { "quote-stream": "^1.0.1", "resolve": "^1.1.5", - "static-module": "^2.0.0", + "static-module": "^2.1.1", "through2": "^2.0.0" }, "devDependencies": {