Skip to content

Commit 50a7a06

Browse files
benhillisBen HillisCopilot
authored
petri/logview: update postcss to 8.5.12 to fix CVE (#3393)
Fixes Dependabot alert #32 (PostCSS XSS via unescaped `</style>` in CSS stringify output). Updates the lockfile from postcss 8.5.8 → 8.5.12 (vulnerable range was < 8.5.10). The `package.json` already had `^8.5.6` so only the lockfile needed updating. --------- Co-authored-by: Ben Hillis <benhill@ntdev.microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent c2820eb commit 50a7a06

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

petri/logview/package-lock.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2161,9 +2161,9 @@
21612161
}
21622162
},
21632163
"node_modules/postcss": {
2164-
"version": "8.5.8",
2165-
"resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.8.tgz",
2166-
"integrity": "sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==",
2164+
"version": "8.5.12",
2165+
"resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.12.tgz",
2166+
"integrity": "sha512-W62t/Se6rA0Az3DfCL0AqJwXuKwBeYg6nOaIgzP+xZ7N5BFCI7DYi1qs6ygUYT6rvfi6t9k65UMLJC+PHZpDAA==",
21672167
"dev": true,
21682168
"funding": [
21692169
{

0 commit comments

Comments
 (0)