[2.x] Bump eslint-import-resolver-webpack and browserify-sign

Backport PR: opensearch-project#5414 Signed-off-by: ananzh <ananzh@amazon.com>
ananzh · Nov 8, 2023 · fad7f9f · fad7f9f
1 parent 64f9f1a
commit fad7f9f
Show file tree

Hide file tree

Showing 3 changed files with 402 additions and 58 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -9,6 +9,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 ### 🛡 Security
 
 - [CVE-2023-45133] Add package resolution for `@babel/traverse` to `7.23.2` to fix vulnerability ([#5309](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/5309))
+- [CVE-2023-46234] Bump `eslint-import-resolver-webpack` from `0.11.1` to `0.13.8` and `browserify-sign` from `4.2.1` to `4.2.2` ([#5414](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/5414/))
 
 ### 📈 Features/Enhancements
 

diff --git a/packages/osd-eslint-import-resolver-opensearch-dashboards/package.json b/packages/osd-eslint-import-resolver-opensearch-dashboards/package.json
@@ -15,7 +15,7 @@
  "dependencies": {
  "debug": "^2.6.9",
  "eslint-import-resolver-node": "0.3.2",
- "eslint-import-resolver-webpack": "0.11.1",
+ "eslint-import-resolver-webpack": "0.13.8",
  "glob-all": "^3.2.1",
  "lru-cache": "^4.1.5",
  "resolve": "^1.7.1",