From 1c236eda4ba98ce2255e060c0999eb168940c12e Mon Sep 17 00:00:00 2001 From: Mark Date: Tue, 20 Feb 2018 00:44:33 -0500 Subject: [PATCH] fix(package): upgrade html-dom-parser@0.1.3 and devDependencies html-dom-parser@0.1.3 has a fix for a regular expression vulnerability (catastrophic backtracking): https://snyk.io/blog/redos-and-catastrophic-backtracking Credit goes to @davisjam for notifying me of this issue --- package.json | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/package.json b/package.json index 281f7993..c822cc2d 100644 --- a/package.json +++ b/package.json @@ -32,22 +32,22 @@ "converter" ], "dependencies": { - "html-dom-parser": "0.1.2", + "html-dom-parser": "0.1.3", "react-dom-core": "0.0.2", "style-to-object": "0.2.0" }, "devDependencies": { - "@commitlint/cli": "^5.2.3", - "@commitlint/config-conventional": "^5.2.3", + "@commitlint/cli": "^6.1.0", + "@commitlint/config-conventional": "^6.1.0", "coveralls": "^3.0.0", - "eslint": "^4.12.0", + "eslint": "^4.18.0", "husky": "^0.14.3", "istanbul": "^0.4.5", - "mocha": "^4.0.1", + "mocha": "^5.0.1", "react": "^16", "react-dom": "^16", - "standard-version": "^4.2.0", - "webpack": "^3.8.1" + "standard-version": "^4.3.0", + "webpack": "^3.11.0" }, "peerDependencies": { "react": "^0.14 || ^15 || ^16"