From 28315d64f5a8bbe4d34f077f9d59c6ea31a88d39 Mon Sep 17 00:00:00 2001 From: ryanml Date: Mon, 24 May 2021 16:07:06 -0700 Subject: [PATCH] Upgrading dns-packet to ^5.2.2 to resolve vulnerability (#11172) --- package.json | 1 + yarn.lock | 9 ++++----- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 050aa01a5..ead85680f 100644 --- a/package.json +++ b/package.json @@ -75,6 +75,7 @@ "**/xmlhttprequest-ssl": "^1.6.2", "3box/ipfs/ipld-zcash/zcash-bitcore-lib/lodash": "^4.17.21", "3box/ipfs/ipld-zcash/zcash-bitcore-lib/elliptic": "^6.5.4", + "3box/ipfs/libp2p-mdns/multicast-dns/dns-packet": "^5.2.2", "3box/**/libp2p-crypto/node-forge": "^0.10.0", "3box/**/libp2p-keychain/node-forge": "^0.10.0", "analytics-node/axios": "^0.21.1", diff --git a/yarn.lock b/yarn.lock index 4b05e3819..c40f5432a 100644 --- a/yarn.lock +++ b/yarn.lock @@ -9267,13 +9267,12 @@ dnd-core@^7.4.4: invariant "^2.2.4" redux "^4.0.1" -dns-packet@^4.0.0: - version "4.2.0" - resolved "https://registry.yarnpkg.com/dns-packet/-/dns-packet-4.2.0.tgz#3fd6f5ff5a4ec3194ed0b15312693ffe8776b343" - integrity sha512-bn1AKpfkFbm0MIioOMHZ5qJzl2uypdBwI4nYNsqvhjsegBhcKJUlCrMPWLx6JEezRjxZmxhtIz/FkBEur2l8Cw== +dns-packet@^4.0.0, dns-packet@^5.2.2: + version "5.2.2" + resolved "https://registry.yarnpkg.com/dns-packet/-/dns-packet-5.2.2.tgz#e4c7d12974cc320b0c0d4b9bbbf68ac151cfe81e" + integrity sha512-sQN+vLwC3PvOXiCH/oHcdzML2opFeIdVh8gjjMZrM45n4dR80QF6o3AzInQy6F9Eoc0VJYog4JpQTilt4RFLYQ== dependencies: ip "^1.1.5" - safe-buffer "^5.1.1" doctrine@1.5.0: version "1.5.0"