From fbd603db685943bc9c6a5fe176c14eb704de152d Mon Sep 17 00:00:00 2001 From: orkamara Date: Thu, 30 Jan 2020 15:59:16 +0200 Subject: [PATCH] fix: vuln in transitive pkg of configstore (dot-prop) --- configstore-3.1.2-RC1.tgz | Bin 0 -> 3074 bytes package.json | 8 ++++++-- 2 files changed, 6 insertions(+), 2 deletions(-) create mode 100644 configstore-3.1.2-RC1.tgz diff --git a/configstore-3.1.2-RC1.tgz b/configstore-3.1.2-RC1.tgz new file mode 100644 index 0000000000000000000000000000000000000000..10d8de48018b1296032e80c0b6c483f99e52588c GIT binary patch literal 3074 zcmV+d4E^&TiwFP!000001MM39bJ|9>zgmCAp3^DN0f8OYxpC^W7-U;F7&rt;J#MZn z(gKPlE!D34QP=mk-+Q|&5ZFmNZIkw9tjPpv-`n@KPwz`!Q2&z7SUn1TmI(I6r??u8 z#{T{ud2Ai7-M!~K^F9H_V*ir*Vt+7@4kTFPa@66l?h2x5ao~3(aMnJ@Bhiw z;)~lfoXsWi!X!u;@pwAV1o>8|N1>j+pT#tcY@f%kNVy2WrHW+@SP%-ChLcQ&JRvj* zNG2Ew6C!w)`b@1%!i1)`WXjW6RLONH=Y*%~muHg1JP45!cEI&Ej*k!H6ItKH$iJsJ&ru&~|qVCS|1G`r`-`Jq2>JdgAS z#69bGTp$M22hHx#b-XHZyRFWs?RHP91PG9BZ%8`snL7luVXvx~KHNrn$K=czv`*o% zdE|E7;kn{>><+ug>lm0dNxwN5x~);CIUxPfpx^Txf@-y0uhnU~XHMG&?!b{aubu9Y zc&E)y=TR+D_B9=k91ya3)NwQ?(6a3goYoN4S>3h3av)!)O1!?)a`DFb!2xBOgY&AP z={f%%0TKX7yLr|;0o}?UF$tVWYcz1qP-d`$H#+i$?r=18$Vso)R)+SR!E3kWcrQt( z=P7HAJf{jAhE2s7NPwvT4EIMP&s9cqyF+I%81;v4uUi4l-+);_#wKiSE9>^UN>#8> zZ*Y!8(FV%+Rr2Q4f%O3zR9UKtCh)*wtzi)j_<;e31szG(IqA43PPgSCw1-sQxSmsi zvvNH|a5dXEP2f3FD&rY}RQk5yu~l`F#62d>_G=f#Hpp=Ho@@L>nXGkc%xznLbzuHX z*TUp~2DJTe~|xQ>@}Y9|L3?$n5Z$>`?B=Xg6slmWjl0&&D!njyLrfZN{N_{rXqS~~864Oi84$~qYF4clCT_N2Bvm+`Xf3D%d zYHgyISE$!%DA{osv8Lp4=oj%7s5S*yjVj=3SHNXI<%=RVEY%=ic68@Yq4@?7@ zwScMDYeE4K-QdIj({QGhTWMhHW%BE<%B=P~9wucjY#A>ATCP;r_>?P4_Nx350ur#3 zrW}cu&Upr+CqI@XnNuhgsP8i&h~&CNKvnJ1hNXK8T`U}uJ1DW(0cr5Yi$>%AfdL;w z+*gPe)D*y`r4$j8Lz#7FZK>^P=EHM245}nxQ<_B*N;|%gqJk(}cn1X44;bJMiEVAI zoUEU+X?SBW>{-MoG}3JP=z`w?^47{~$fcys34w|yr3yJ%$1qSOW2s8UU*3hmy}}(= z6l=7TZQOgcZFzFlf>f}<;L|7q^xoth^Q8@z2xm$8?!KsTj)r^gfzOOd0*_^F1qn4D z{%%3NnWYK&m)Glp5UF70sjyQ<1GK+)oA~9We4uG2r~fQfloQ! zv|y{mS`DhbDGAZ7nMlAn*bS6#hy=^H#a1Qn;UTz?)9pchP%=cejFZ>`nJa?;wS>lO zB?)-wx+^J(mdfCn!V_w(gmPo7CUrp@gLgu1!LoJb&4i&li}#4vY(aUl6c2$pkwZMr z!ovNJ$(MHc1Lxa(u|8lnIZydD+C`nUb|GP02*lg)BGBp#4ups-WqJJ{Ks~Qc9l8R6 zDuRMhprgcuu>^cIV%SQVwjgFSkCHKtsBy_|MR^%aR4A<25ld!rz6u#-z*^gE(v*#`d~=l` z*2|@n;HD~BdPy-AfoAzGbzEo_n$A=|C=7RHogHHqXiQ02Q@BLi7KKNyx%G0nkiBLF zQYpbMF5gy+o$wr4B$(dw=$2e^ZN>F)tC5VJb1L3z9E3e;9PRR}eeX5RN;S7)|pazrs=P_PqrdkVrGg$?RsqQR0~7^>7aW;E z3=I<|mfRrUAo{Dry&OXuYKbA4kce@^$yZ+ydPQ?QEKd;Y01)RELAf=gUO_X<1m(3K*0;=kU%$~7cdCuyMRh+kkA=G_~HX3 z5TTB^Up=ILbok96U*7Cf=6kQZB?ny)ILT-=gM+Hcw~uhoRRN zSF`UXDNX$OVN4-1q?O;kxnfzb$Yv5TA?A1F5zEqL76}DW^i|tKRX3vBz=%VKp_j*B z{?I=8snzQqyC*-L_RgF!ew7;kw{8YEWBc1l`pR-{XuOEnK>US*kBh4!0_x^lf+oyoD%cieOcW+-AXCDwi~PzU zsp`|KHxyv+T z#vBicMwt z1BHKYR4|>(O1$4Je+KDp3PntS9-}>|*>~~x*}Ap$(RG!Fig^@e+L}k>s zR3qYYXEAORsp#!C8DhMEf8a>)9>VJ%V@VR=WCvqPtUeAi{KmdefUb<20u%|>DIFL3i+Urm8SWy#M+v(D8ld!Elw1atoxU%NYv5Y zpk-Y^Ge}Hts9g^{4+YnM)S(Is0~Ym(2x{iRUd$I2^?I-V(B*{lS;YPx3X`J QuD|U1A47)+>HsPL0H7%Eu>b%7 literal 0 HcmV?d00001 diff --git a/package.json b/package.json index b98a8bb36f..3894d929a1 100644 --- a/package.json +++ b/package.json @@ -10,7 +10,8 @@ "SECURITY.md", "README.md", "Contributor-Agreement.md", - ".snyk" + ".snyk", + "configstore-3.1.2-RC1.tgz" ], "directories": { "test": "test" @@ -64,7 +65,7 @@ "ansi-escapes": "3.2.0", "chalk": "^2.4.2", "cli-spinner": "0.2.10", - "configstore": "^3.1.2", + "configstore": "file:configstore-3.1.2-RC1.tgz", "debug": "^3.1.0", "diff": "^4.0.1", "git-url-parse": "11.1.2", @@ -126,6 +127,9 @@ "tslint": "^5.14.0", "typescript": "^3.4.1" }, + "bundledDependencies": [ + "configstore" + ], "repository": { "type": "git", "url": "https://github.com/snyk/snyk.git"