Merge pull request #100 from iver-wharf/feature/update-json-schema

Update json-schema to 0.4.0 for CVE-2021-3918
iver-wharf · Jan 10, 2022 · 6d9c4b4 · 6d9c4b4
2 parents 7d9e274 + 44e5247
commit 6d9c4b4
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 7 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -17,6 +17,9 @@ This project tries to follow [SemVer 2.0.0](https://semver.org/).
 - Fixed version panel misplacement on scrollable pages and being locked to the
   width of the side nav bar, a bug introduced in v1.5.0 by #82. (#97)
 
+- Security: Changed version of `jsprim` to v1.4.2 and `json-schema` to v0.4.0
+  to resolve CVE-2021-3918. (#100)
+
 ## v1.5.0 (2021-11-15)
 
 - Removed per-tab titles on project details page. Title is now either

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -69,6 +69,8 @@
     "eslint-plugin-prefer-arrow": "1.2.3",
     "jasmine-core": "^3.8.0",
     "jasmine-spec-reporter": "^7.0.0",
+    "json-schema": "^0.4.0",
+    "jsprim": "^1.4.2",
     "karma": "^6.3.4",
     "karma-chrome-launcher": "~3.1.0",
     "karma-coverage-istanbul-reporter": "~3.0.2",