Skip to content

Commit 97bb39d

Browse files
author
Christopher Beam
committed
Bump faye-websocket to fix CVE-2020-15133
1 parent d68d983 commit 97bb39d

File tree

2 files changed

+23
-8
lines changed

2 files changed

+23
-8
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@
2323
"dependencies": {
2424
"body": "^5.1.0",
2525
"debug": "^3.1.0",
26-
"faye-websocket": "~0.10.0",
26+
"faye-websocket": "^0.11.3",
2727
"livereload-js": "^2.3.0",
2828
"object-assign": "^4.1.0",
2929
"qs": "^6.4.0"

yarn.lock

Lines changed: 22 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1445,9 +1445,10 @@ fast-levenshtein@~2.0.4:
14451445
version "2.0.5"
14461446
resolved "https://registry.yarnpkg.com/fast-levenshtein/-/fast-levenshtein-2.0.5.tgz#bd33145744519ab1c36c3ee9f31f08e9079b67f2"
14471447

1448-
faye-websocket@~0.10.0:
1449-
version "0.10.0"
1450-
resolved "https://registry.yarnpkg.com/faye-websocket/-/faye-websocket-0.10.0.tgz#4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
1448+
faye-websocket@^0.11.3:
1449+
version "0.11.3"
1450+
resolved "https://registry.yarnpkg.com/faye-websocket/-/faye-websocket-0.11.3.tgz#5c0e9a8968e8912c286639fde977a8b209f2508e"
1451+
integrity sha512-D2y4bovYpzziGgbHYtGCMjlJM36vAl/y+xUyn1C+FVx8szd1E+86KwVw6XvYSzOP8iMpm1X0I4xJD+QtUb36OA==
14511452
dependencies:
14521453
websocket-driver ">=0.5.1"
14531454

@@ -1864,6 +1865,11 @@ http-errors@~1.5.0:
18641865
setprototypeof "1.0.1"
18651866
statuses ">= 1.3.0 < 2"
18661867

1868+
http-parser-js@>=0.5.1:
1869+
version "0.5.2"
1870+
resolved "https://registry.yarnpkg.com/http-parser-js/-/http-parser-js-0.5.2.tgz#da2e31d237b393aae72ace43882dd7e270a8ff77"
1871+
integrity sha512-opCO9ASqg5Wy2FNo7A0sxy71yGbbkJJXLdgMK04Tcypw9jr2MgWbyubb0+WdmDmGnFflO7fRbqbaihh/ENDlRQ==
1872+
18671873
http-signature@~1.1.0:
18681874
version "1.1.1"
18691875
resolved "https://registry.yarnpkg.com/http-signature/-/http-signature-1.1.1.tgz#df72e267066cd0ac67fb76adf8e134a8fbcf91bf"
@@ -3049,6 +3055,11 @@ rx-lite@^3.1.2:
30493055
version "3.1.2"
30503056
resolved "https://registry.yarnpkg.com/rx-lite/-/rx-lite-3.1.2.tgz#19ce502ca572665f3b647b10939f97fd1615f102"
30513057

3058+
safe-buffer@>=5.1.0:
3059+
version "5.2.1"
3060+
resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6"
3061+
integrity sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==
3062+
30523063
safe-json-parse@~1.0.1:
30533064
version "1.0.1"
30543065
resolved "https://registry.yarnpkg.com/safe-json-parse/-/safe-json-parse-1.0.1.tgz#3e76723e38dfdda13c9b1d29a1e07ffee4b30b57"
@@ -3515,14 +3526,18 @@ verror@1.3.6:
35153526
extsprintf "1.0.2"
35163527

35173528
websocket-driver@>=0.5.1:
3518-
version "0.6.5"
3519-
resolved "https://registry.yarnpkg.com/websocket-driver/-/websocket-driver-0.6.5.tgz#5cb2556ceb85f4373c6d8238aa691c8454e13a36"
3529+
version "0.7.4"
3530+
resolved "https://registry.yarnpkg.com/websocket-driver/-/websocket-driver-0.7.4.tgz#89ad5295bbf64b480abcba31e4953aca706f5760"
3531+
integrity sha512-b17KeDIQVjvb0ssuSDF2cYXSg2iztliJ4B9WdsuB6J952qCPKmnVq4DyW5motImXHDC1cBT/1UezrJVsKw5zjg==
35203532
dependencies:
3533+
http-parser-js ">=0.5.1"
3534+
safe-buffer ">=5.1.0"
35213535
websocket-extensions ">=0.1.1"
35223536

35233537
websocket-extensions@>=0.1.1:
3524-
version "0.1.1"
3525-
resolved "https://registry.yarnpkg.com/websocket-extensions/-/websocket-extensions-0.1.1.tgz#76899499c184b6ef754377c2dbb0cd6cb55d29e7"
3538+
version "0.1.4"
3539+
resolved "https://registry.yarnpkg.com/websocket-extensions/-/websocket-extensions-0.1.4.tgz#7f8473bc839dfd87608adb95d7eb075211578a42"
3540+
integrity sha512-OqedPIGOfsDlo31UNwYbCFMSaO9m9G/0faIHj5/dZFDMFqPTcx6UwqyOy3COEaEOg/9VsGIpdqn62W5KhoKSpg==
35263541

35273542
which-module@^1.0.0:
35283543
version "1.0.0"

0 commit comments

Comments
 (0)