Skip to content

Commit c02d4de

Browse files
committed
[CVE-2022-25758][CVE-2020-24025] Bump node-sass to 7.0.3 and sass-loader to 10.4.1 in 2.x
Bump node-sass to 7.0.3 and sass-loader to 10.4.1 Issue Resolved: #1067 #1842 Signed-off-by: Anan Zhuang <ananzh@amazon.com>
1 parent 29d887e commit c02d4de

File tree

4 files changed

+89
-103
lines changed

4 files changed

+89
-103
lines changed

package.json

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -88,6 +88,7 @@
8888
"**/loader-utils": "^2.0.4",
8989
"**/node-jose": "^2.1.0",
9090
"**/nth-check": "^2.0.1",
91+
"**/sass-loader": "^10.4.1",
9192
"**/trim": "^0.0.3",
9293
"**/typescript": "4.0.2",
9394
"**/unset-value": "^2.0.1",
@@ -190,6 +191,7 @@
190191
"mustache": "^2.3.2",
191192
"node-fetch": "^2.6.7",
192193
"node-forge": "^1.3.0",
194+
"node-sass": "^7.0.3",
193195
"p-map": "^4.0.0",
194196
"pegjs": "0.10.0",
195197
"proxy-from-env": "1.0.0",

packages/osd-optimizer/package.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,6 @@
2929
"js-yaml": "^3.14.0",
3030
"json-stable-stringify": "^1.0.1",
3131
"lmdb-store": "^1.6.11",
32-
"node-sass": "^6.0.1",
3332
"normalize-path": "^3.0.0",
3433
"pirates": "^4.0.1",
3534
"postcss": "^8.4.5",

packages/osd-ui-framework/package.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,6 @@
3030
"grunt-babel": "^8.0.0",
3131
"grunt-contrib-clean": "^2.0.0",
3232
"grunt-contrib-copy": "^1.0.0",
33-
"node-sass": "^6.0.1",
3433
"postcss": "^8.4.5",
3534
"sinon": "^7.4.2"
3635
}

0 commit comments

Comments
 (0)