Skip to content

Commit e57709e

Browse files
committed
chore: bump asl-validator to fix cve-2021-23358
CVE-2021-23358 affects the `underscore` library which is used by `jsonpath` in `asl-validator`. `asl-validator` 1.8.* use `jsonpath` 1.0.* which use `underscore` 1.7.0, affected by the CVE. `asl-validator` 1.9.* use `jsonpath` 1.1.* which use `underscore` 1.12.1, which is the earliest fixed version. Also replace all `http://npm.paesslergmbh.de:4873` by `https://registry.npmjs.org` in `package-lock.json` because the url looked dead to me. I also don't understand why it was here...
1 parent e0a391d commit e57709e

File tree

2 files changed

+25097
-5389
lines changed

2 files changed

+25097
-5389
lines changed

0 commit comments

Comments
 (0)