Skip to content

Commit 21cea0b

Browse files
alan-agius4dgp1130
authored andcommitted
fix(@angular-devkit/build-angular): update loader-utils to 3.2.1
`loader-utils` is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable. See: GHSA-3rfm-jhwj-7488 Closes #24241
1 parent 7541e04 commit 21cea0b

File tree

3 files changed

+7
-2
lines changed

3 files changed

+7
-2
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -170,7 +170,7 @@
170170
"less-loader": "11.0.0",
171171
"license-checker": "^25.0.0",
172172
"license-webpack-plugin": "4.0.2",
173-
"loader-utils": "3.2.0",
173+
"loader-utils": "3.2.1",
174174
"magic-string": "0.26.2",
175175
"mini-css-extract-plugin": "2.6.1",
176176
"minimatch": "5.1.0",

packages/angular_devkit/build_angular/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
"less": "4.1.3",
3939
"less-loader": "11.0.0",
4040
"license-webpack-plugin": "4.0.2",
41-
"loader-utils": "3.2.0",
41+
"loader-utils": "3.2.1",
4242
"mini-css-extract-plugin": "2.6.1",
4343
"minimatch": "5.1.0",
4444
"open": "8.4.0",

yarn.lock

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7317,6 +7317,11 @@ [email protected]:
73177317
resolved "https://registry.yarnpkg.com/loader-utils/-/loader-utils-3.2.0.tgz#bcecc51a7898bee7473d4bc6b845b23af8304d4f"
73187318
integrity sha512-HVl9ZqccQihZ7JM85dco1MvO9G+ONvxoGa9rkhzFsneGLKSUg1gJf9bWzhRhcvm2qChhWpebQhP44qxjKIUCaQ==
73197319

7320+
7321+
version "3.2.1"
7322+
resolved "https://registry.yarnpkg.com/loader-utils/-/loader-utils-3.2.1.tgz#4fb104b599daafd82ef3e1a41fb9265f87e1f576"
7323+
integrity sha512-ZvFw1KWS3GVyYBYb7qkmRM/WwL2TQQBxgCK62rlvm4WpVQ23Nb4tYjApUlfjrEGvOs7KHEsmyUn75OHZrJMWPw==
7324+
73207325
loader-utils@^2.0.0:
73217326
version "2.0.2"
73227327
resolved "https://registry.yarnpkg.com/loader-utils/-/loader-utils-2.0.2.tgz#d6e3b4fb81870721ae4e0868ab11dd638368c129"

0 commit comments

Comments
 (0)