Skip to content

Commit db9aec3

Browse files
fix: patch marked ReDoS vulnerability (CVE-2022-21681) via Yarn resolution override (#1236)
* Initial plan * fix: upgrade marked to 4.0.10 via resolutions to fix ReDoS (GHSA-5v2h-r2cx-5xgj) Agent-Logs-Url: https://github.com/rescript-lang/rescript-lang.org/sessions/9eb986e6-cb64-40d5-ac83-ff5bdd72d561 Co-authored-by: jderochervlk <60623931+jderochervlk@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: jderochervlk <60623931+jderochervlk@users.noreply.github.com>
1 parent ce8ce7a commit db9aec3

2 files changed

Lines changed: 8 additions & 5 deletions

File tree

package.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,9 @@
8282
"unified": "^11.0.5",
8383
"vfile-matter": "^5.0.1"
8484
},
85+
"resolutions": {
86+
"marked": "4.0.10"
87+
},
8588
"devDependencies": {
8689
"@prettier/plugin-oxc": "^0.1.3",
8790
"@react-router/dev": "^7.14.0",

yarn.lock

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6635,12 +6635,12 @@ __metadata:
66356635
languageName: node
66366636
linkType: hard
66376637

6638-
"marked@npm:^0.3.14":
6639-
version: 0.3.19
6640-
resolution: "marked@npm:0.3.19"
6638+
"marked@npm:4.0.10":
6639+
version: 4.0.10
6640+
resolution: "marked@npm:4.0.10"
66416641
bin:
6642-
marked: ./bin/marked
6643-
checksum: 10c0/ee5e268716de56a7543c245268d72e5eb1a66f67022e0392cab9744b3b38768d1db289c173679ff696cdbf1bcd82ff10520cae2296f3293989e07a17f9218705
6642+
marked: bin/marked.js
6643+
checksum: 10c0/137660cd1eca54cfcdcec9d9c7dea786fc57ba3663da9043b721aff4c1419fc869d21bc38f6d5907062b82d4ef354f4fcac6605cac5f4f9dc1595a743b856d91
66446644
languageName: node
66456645
linkType: hard
66466646

0 commit comments

Comments
 (0)