From 17c1c25bf0fb9fbdb438d8f8e143a69362278266 Mon Sep 17 00:00:00 2001 From: Peter Bengtsson Date: Mon, 24 Jan 2022 17:25:18 -0500 Subject: [PATCH] Pin at least shelljs@0.8.5 Because of https://nvd.nist.gov/vuln/detail/CVE-2022-0144 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 3948d35..9cb792d 100644 --- a/package.json +++ b/package.json @@ -52,7 +52,7 @@ "chalk": "^2.3.2", "diff": "^3.5.0", "loglevel": "^1.6.1", - "shelljs": "^0.8.1", + "shelljs": "^0.8.5", "shelljs.exec": "^1.1.7" }, "devDependencies": {