Add fix for CVE-2023-2251 (opensearch-project#102) (opensearch-projec…

…t#104) Signed-off-by: Rupal Mahajan <[email protected]> (cherry picked from commit 3eb68dd6deb1986425e5994a96391a3154ec7211) Co-authored-by: Rupal Mahajan <[email protected]>
kavilla · Apr 26, 2023 · 1fb4282 · 1fb4282
1 parent 418d742
commit 1fb4282
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 5 deletions.
diff --git a/package.json b/package.json
@@ -78,6 +78,7 @@
     "minimatch": "^3.0.5",
     "terser": "^4.8.1",
     "moment": "^2.29.4",
-    "loader-utils": "^2.0.3"
+    "loader-utils": "^2.0.3",
+    "yaml": "^2.2.2"
   }
 }
diff --git a/yarn.lock b/yarn.lock
@@ -7179,10 +7179,10 @@ yallist@^3.0.2:
   resolved "https://registry.yarnpkg.com/yallist/-/yallist-3.1.1.tgz#dbb7daf9bfd8bac9ab45ebf602b8cbad0d5d08fd"
   integrity sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==
 
-yaml@^1.7.2:
-  version "1.10.0"
-  resolved "https://registry.yarnpkg.com/yaml/-/yaml-1.10.0.tgz#3b593add944876077d4d683fee01081bd9fff31e"
-  integrity sha512-yr2icI4glYaNG+KWONODapy2/jDdMSDnrONSjblABjD9B4Z5LgiircSt8m8sRZFNi08kG9Sm0uSHtEmP3zaEGg==
+yaml@^1.7.2, yaml@^2.2.2:
+  version "2.2.2"
+  resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.2.2.tgz#ec551ef37326e6d42872dad1970300f8eb83a073"
+  integrity sha512-CBKFWExMn46Foo4cldiChEzn7S7SRV+wqiluAb6xmueD/fGyRHIhX8m14vVGgeFWjN540nKCNVj6P21eQjgTuA==
 
 [email protected], yargs-parser@^18.1.2:
   version "18.1.3"