From 5172fca4f820ec77786f2ee03d07e42817dd0587 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 26 Mar 2024 02:47:03 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MARKDOWNIT-6483324 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 2116da6a0e3..4b872e9ddc5 100644 --- a/package.json +++ b/package.json @@ -109,7 +109,7 @@ "klaro": "^0.7.18", "lodash": "^4.17.21", "lru-cache": "^7.14.1", - "markdown-it": "^13.0.1", + "markdown-it": "^13.0.2", "markdown-it-mathjax3": "^4.3.2", "mirador": "^3.3.0", "mirador-dl-plugin": "^0.13.0", diff --git a/yarn.lock b/yarn.lock index c5a82d9e75d..b1e6ee411d7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -7825,10 +7825,10 @@ markdown-it-mathjax3@^4.3.2: juice "^8.0.0" mathjax-full "^3.2.0" -markdown-it@^13.0.1: - version "13.0.1" - resolved "https://registry.npmjs.org/markdown-it/-/markdown-it-13.0.1.tgz" - integrity sha512-lTlxriVoy2criHP0JKRhO2VDG9c2ypWCsT237eDiLqi09rmbKoUetyGHq2uOIRoRS//kfoJckS0eUzzkDR+k2Q== +markdown-it@^13.0.2: + version "13.0.2" + resolved "https://registry.yarnpkg.com/markdown-it/-/markdown-it-13.0.2.tgz#1bc22e23379a6952e5d56217fbed881e0c94d536" + integrity sha512-FtwnEuuK+2yVU7goGn/MJ0WBZMM9ZPgU9spqlFs7/A/pDIUNSOQZhUgOqYCficIuR2QaFnrt8LHqBWsbTAoI5w== dependencies: argparse "^2.0.1" entities "~3.0.1"