fix cve-2024-39338 (#409)

openclarity · Aug 23, 2024 · 37aa375 · 37aa375
1 parent 7639744
commit 37aa375
Show file tree

Hide file tree

Showing 3 changed files with 74 additions and 67 deletions.
diff --git a/Makefile b/Makefile
@@ -31,6 +31,12 @@ ui: ## Build UI
 	@(cd ui; npm i ; npm run build; )
 	@ls -l ui/build
 
+.PHONY: ui_no_bin_links
+ui_no_bin_links: ## Build UI
+	@(echo "Building UI (without bin links) ..." )
+	@(cd ui; npm i --no-bin-links; npm run buildfulllink; )
+	@ls -l ui/build
+
 .PHONY: backend
 backend: ## Build Backend
 	@(echo "Building Backend ..." )

diff --git a/ui/package-lock.json b/ui/package-lock.json
diff --git a/ui/package.json b/ui/package.json
@@ -4,7 +4,7 @@
   "private": true,
   "dependencies": {
     "@apiclarity/modules": "file:src/modules",
-    "axios": "^1.0.0",
+    "axios": ">=1.7.4",
     "classnames": "^2.3.1",
     "formik": "^2.2.9",
     "moment": "^2.29.3",
@@ -29,6 +29,7 @@
   "scripts": {
     "start": "react-scripts start",
     "build": "react-scripts build",
+    "buildfulllink": "node_modules/react-scripts/bin/react-scripts.js build",
     "test": "react-scripts test",
     "eject": "react-scripts eject",
     "preinstall": "node ./preinstall.js"