Skip to content

Commit e2df5d1

Browse files
Fix Critical Security Vulnerabilities (#400)
The sample app pipeline is still failing due to a few [critical vulnerabilities](https://github.com/circlefin/payments-sample-app-private/actions/runs/16807342936) Use yarn resolutions to use more secure versions and unblock pipeline
1 parent cf2db2a commit e2df5d1

File tree

2 files changed

+200
-91
lines changed

2 files changed

+200
-91
lines changed

package.json

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,14 @@
5353
},
5454
"resolutions": {
5555
"tmp": ">=0.2.4",
56-
"external-editor/tmp": ">=0.2.4"
56+
"external-editor/tmp": ">=0.2.4",
57+
"on-headers": ">=1.1.0",
58+
"compression": ">=1.8.0",
59+
"form-data": "3.0.4",
60+
"axios/form-data": "3.0.4",
61+
"pbkdf2": "3.1.3",
62+
"brace-expansion": "1.1.12",
63+
"minimatch/brace-expansion": "1.1.12"
5764
},
5865
"devDependencies": {
5966
"@nuxt/types": "^2.15.8",

0 commit comments

Comments
 (0)