CumulusDS / dlq

CLI tool to manipulate AWS Dead Letter Queues
MIT License
1 stars 2 forks source link

Upgrade `socks` to resolve CVE-2023-42282 - vulnerability in `ip` #85

Closed jeffsays closed 7 months ago

jeffsays commented 7 months ago

Summary

What does this PR do?

Before

yarn why socks
   └─ socks@npm:2.7.1 (via npm:^2.6.2)
└─ socks-proxy-agent@npm:7.0.0

yarn why ip
   └─ ip@npm:2.0.0 (via npm:^2.0.0)

After

yarn why socks
   └─ socks@npm:2.8.0 (via npm:^2.6.2)
└─ socks-proxy-agent@npm:7.0.0

yarn why ip

Testing

How can the other reviewers check that your change works?

build should pass