Skip to content

Commit 52dbc78

Browse files
committed
[CVE-2022-25758][CVE-2020-24025] Bump node-sass to 7.0.3 and sass-loader to 10.4.1 in 2.x
Bump node-sass to 7.0.3 and sass-loader to 10.4.1 Issue Resolved: #1067 #1842 Signed-off-by: Anan Zhuang <ananzh@amazon.com>
1 parent e484a7a commit 52dbc78

File tree

5 files changed

+90
-103
lines changed

5 files changed

+90
-103
lines changed

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
1111
- [CVE-2022-25860] Bump simple-git from 3.15.1 to 3.16.0 ([#3345](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3345))
1212
- [CVE-2020-36632] [REQUIRES PLUGIN VALIDATION] Bump flat from 4.1.1 to 5.0.2 ([#3419](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3419)). To the best of our knowledge, this is a non-breaking change, but if your plugin relies on `mocha` tests, validate that they still work correctly (and plan to migrate them to `jest` [in preparation for `mocha` deprecation](https://github.com/opensearch-project/OpenSearch-Dashboards/issues/1572).
1313
- [CVE-2023-25166] Bump formula from 3.0.0 to 3.0.1 ([#3416](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3416))
14+
- [CVE-2022-25758][CVE-2020-24025] Bump node-sass to 7.0.3 and sass-loader to 10.4.1 in 2.x ([#3455](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/3455))
1415

1516
### 📈 Features/Enhancements
1617

package.json

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -88,6 +88,7 @@
8888
"**/loader-utils": "^2.0.4",
8989
"**/node-jose": "^2.1.0",
9090
"**/nth-check": "^2.0.1",
91+
"**/sass-loader": "^10.4.1",
9192
"**/trim": "^0.0.3",
9293
"**/typescript": "4.0.2",
9394
"**/unset-value": "^2.0.1",
@@ -190,6 +191,7 @@
190191
"mustache": "^2.3.2",
191192
"node-fetch": "^2.6.7",
192193
"node-forge": "^1.3.0",
194+
"node-sass": "^7.0.3",
193195
"p-map": "^4.0.0",
194196
"pegjs": "0.10.0",
195197
"proxy-from-env": "1.0.0",

packages/osd-optimizer/package.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,6 @@
2929
"js-yaml": "^3.14.0",
3030
"json-stable-stringify": "^1.0.1",
3131
"lmdb-store": "^1.6.11",
32-
"node-sass": "^6.0.1",
3332
"normalize-path": "^3.0.0",
3433
"pirates": "^4.0.1",
3534
"postcss": "^8.4.5",

packages/osd-ui-framework/package.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,6 @@
3030
"grunt-babel": "^8.0.0",
3131
"grunt-contrib-clean": "^2.0.0",
3232
"grunt-contrib-copy": "^1.0.0",
33-
"node-sass": "^6.0.1",
3433
"postcss": "^8.4.5",
3534
"sinon": "^7.4.2"
3635
}

0 commit comments

Comments
 (0)