Pin version of VM2 to version w/o vulnerability

juice-shop · Oct 12, 2022 · 24c7cbd · 24c7cbd
1 parent 93e1fab
commit 24c7cbd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/package.json b/package.json
@@ -48,7 +48,7 @@
     "@nlpjs/nlu": "^4.4.0",
     "@nlpjs/request": "^4.4.0",
     "@nlpjs/sentiment": "^4.4.0",
-    "vm2": "3.9.3"
+    "vm2": "3.9.11"
   },
   "devDependencies": {
     "chai": "^4.2.0",