Skip to content

Commit 4a808fa

Browse files
* Update package.json A Security Vuln was identified in the Colors package for >1.4.0, offending packages being `1.4.1`, `1.4.44-liberty` - [source1](https://twitter.com/snyksec/status/1480286811482206216?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Etweet) - [source2](https://twitter.com/snyksec/status/1480286811482206216?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Etweet) - [source3](https://security.snyk.io/vuln/SNYK-JS-COLORS-2331906) This PR pins the color package to `1.4.0` as advised on the [snyk page](https://snyk.io/blog/open-source-maintainer-pulls-the-plug-on-npm-packages-colors-and-faker-now-what/) * chore: update changelog * fix: update and pin [email protected] * chore: update CHANGELOG
1 parent 28726aa commit 4a808fa

File tree

2 files changed

+5
-2
lines changed

2 files changed

+5
-2
lines changed

CHANGELOG.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,8 @@ Please see [CONTRIBUTING.md](https://github.com/cucumber/cucumber/blob/master/CO
1818
[Issue#1869](https://github.com/cucumber/cucumber-js/issues/1869))
1919
- Allows for parentheses in paths for developers working on cucumber's own code ([[#1735](https://github.com/cucumber/cucumber-js/issues/1735)])
2020
- Smoother onboarding for Windows developers ([#1863](https://github.com/cucumber/cucumber-js/pull/1863))
21+
- Pin `colors` to `1.4.0` to fix security vulnerability ([#1884](https://github.com/cucumber/cucumber-js/issues/1884))
22+
- Pin `cli-table3` to `0.6.1` to fix security vulnerability ([#251](https://github.com/cli-table/cli-table3/pull/251))
2123

2224
### Added
2325
- Export cucumber version number. It is now possible to retrieve the current version

package.json

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -99,6 +99,7 @@
9999
"Lukas Degener <[email protected]>",
100100
"Łukasz Gandecki <[email protected]>",
101101
"M.P. Korstanje <[email protected]>",
102+
"mannyluvstacos <[email protected]>",
102103
"Marat Dyatko <[email protected]>",
103104
"Marc Burton <[email protected]>",
104105
"Marcel Hoyer <[email protected]>",
@@ -193,8 +194,8 @@
193194
"@cucumber/tag-expressions": "4.1.0",
194195
"assertion-error-formatter": "^3.0.0",
195196
"capital-case": "^1.0.4",
196-
"cli-table3": "^0.6.0",
197-
"colors": "^1.4.0",
197+
"cli-table3": "0.6.1",
198+
"colors": "1.4.0",
198199
"commander": "^8.0.0",
199200
"duration": "^0.2.2",
200201
"durations": "^3.4.2",

0 commit comments

Comments
 (0)