RHIROS-823 updated loader-utils package version to fix a CVE #146
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description:
Fixes:
Bugzilla link:
More info: webpack/loader-utils#212
Prototype pollution in JS: https://learn.snyk.io/lessons/prototype-pollution/javascript/
V2.0.4: https://github.com/webpack/loader-utils/commits/v2.0.4
V1.4.2: https://github.com/webpack/loader-utils/commits/v1.4.2
Steps of fixing the issue
npm audit
to check all the vulnerabilities in the project, and scroll to see loader-utils related issues and affected packagesnpm update loader-utils
to update the package to the version in which issues are fixed. And then runnpm audit
to check which vulnerabilities got fixed.