Commit e57709e
committed
chore: bump asl-validator to fix cve-2021-23358
CVE-2021-23358 affects the `underscore` library which is used by `jsonpath` in `asl-validator`.
`asl-validator` 1.8.* use `jsonpath` 1.0.* which use `underscore` 1.7.0, affected by the CVE.
`asl-validator` 1.9.* use `jsonpath` 1.1.* which use `underscore` 1.12.1, which is the earliest fixed version.
Also replace all `http://npm.paesslergmbh.de:4873` by `https://registry.npmjs.org` in `package-lock.json` because the url looked dead to me. I also don't understand why it was here...1 parent e0a391d commit e57709e
2 files changed
+25097
-5389
lines changed
0 commit comments