Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update vite to resolve vulnerability (XSS) #1104

Merged
merged 1 commit into from
Jan 9, 2024

Conversation

MikeMcC399
Copy link
Collaborator

This PR updates the npm module vite to [email protected] to resolve a security vulnerability Vite XSS vulnerability in server.transformIndexHtml via URL payload reported by GitHub Dependabot.

Verification

cd examples/component-tests
npm ci

and

cd examples/wait-on-vite
npm ci

No vulnerabilities should be reported.

@cypress-app-bot
Copy link

@MikeMcC399 MikeMcC399 marked this pull request as ready for review January 6, 2024 11:18
@jennifer-shehane
Copy link
Member

@MikeMcC399 This PR needs some conflicts resolved

@MikeMcC399
Copy link
Collaborator Author

@jennifer-shehane

This PR needs some conflicts resolved

PR is now rebased and should be good to go.

@jennifer-shehane jennifer-shehane merged commit 58e9fea into cypress-io:master Jan 9, 2024
71 checks passed
@MikeMcC399 MikeMcC399 deleted the update/vite branch January 9, 2024 18:02
Copy link

🎉 This PR is included in version 6.6.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

@MikeMcC399 MikeMcC399 changed the title chore(deps): update vite to resolve vulnerability chore(deps): update vite to resolve vulnerability (XSS) Jan 22, 2024
@MikeMcC399 MikeMcC399 self-assigned this Aug 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants