Pin crypto-js to 3.3.0 (#131)

Merging as we temporarily accept the risk of the vulnerability in `crypto-js@3.3.0`.
auth0 · May 26, 2021 · c455d38 · c455d38
1 parent e8bbee1
commit c455d38
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -35,7 +35,7 @@
   "license": "MIT",
   "dependencies": {
     "base64-js": "^1.3.0",
-    "crypto-js": "^4.0.0",
+    "crypto-js": "3.3.0",
     "es6-promise": "^4.2.8",
     "jsbn": "^1.1.0",
     "unfetch": "^4.1.0",