Skip to content

Commit f298ebb

Browse files
alan-agius4dgp1130
authored andcommittedNov 16, 2022
fix(@angular-devkit/build-angular): update loader-utils to 3.2.1
`loader-utils` is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable. See: GHSA-3rfm-jhwj-7488 Closes #24241
1 parent d091bb0 commit f298ebb

File tree

3 files changed

+7
-2
lines changed

3 files changed

+7
-2
lines changed
 

‎package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -169,7 +169,7 @@
169169
"less-loader": "10.2.0",
170170
"license-checker": "^25.0.0",
171171
"license-webpack-plugin": "4.0.2",
172-
"loader-utils": "3.2.0",
172+
"loader-utils": "3.2.1",
173173
"magic-string": "0.25.7",
174174
"mini-css-extract-plugin": "2.5.3",
175175
"minimatch": "3.0.5",

‎packages/angular_devkit/build_angular/package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@
4040
"less": "4.1.2",
4141
"less-loader": "10.2.0",
4242
"license-webpack-plugin": "4.0.2",
43-
"loader-utils": "3.2.0",
43+
"loader-utils": "3.2.1",
4444
"mini-css-extract-plugin": "2.5.3",
4545
"minimatch": "3.0.5",
4646
"open": "8.4.0",

‎yarn.lock

+5
Original file line numberDiff line numberDiff line change
@@ -7322,6 +7322,11 @@ loader-utils@3.2.0:
73227322
resolved "https://registry.yarnpkg.com/loader-utils/-/loader-utils-3.2.0.tgz#bcecc51a7898bee7473d4bc6b845b23af8304d4f"
73237323
integrity sha512-HVl9ZqccQihZ7JM85dco1MvO9G+ONvxoGa9rkhzFsneGLKSUg1gJf9bWzhRhcvm2qChhWpebQhP44qxjKIUCaQ==
73247324

7325+
loader-utils@3.2.1:
7326+
version "3.2.1"
7327+
resolved "https://registry.yarnpkg.com/loader-utils/-/loader-utils-3.2.1.tgz#4fb104b599daafd82ef3e1a41fb9265f87e1f576"
7328+
integrity sha512-ZvFw1KWS3GVyYBYb7qkmRM/WwL2TQQBxgCK62rlvm4WpVQ23Nb4tYjApUlfjrEGvOs7KHEsmyUn75OHZrJMWPw==
7329+
73257330
loader-utils@^1.4.0:
73267331
version "1.4.0"
73277332
resolved "https://registry.yarnpkg.com/loader-utils/-/loader-utils-1.4.0.tgz#c579b5e34cb34b1a74edc6c1fb36bfa371d5a613"

0 commit comments

Comments
 (0)
Please sign in to comment.