From d3f76f7f3c710d521dc982ca4e5765c1ab4ebe14 Mon Sep 17 00:00:00 2001 From: machenmusik Date: Tue, 25 Apr 2023 18:44:47 -0400 Subject: [PATCH] force resolution of yaml for security (#1818) --- nerfstudio/viewer/app/package.json | 3 ++- nerfstudio/viewer/app/yarn.lock | 8 ++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/nerfstudio/viewer/app/package.json b/nerfstudio/viewer/app/package.json index 15eb4cc2c..a232ef355 100644 --- a/nerfstudio/viewer/app/package.json +++ b/nerfstudio/viewer/app/package.json @@ -90,6 +90,7 @@ "nth-check": "^2.0.1", "@pmmmwh/react-refresh-webpack-plugin": "^0.5.10", "recursive-readdir": "^2.2.3", - "resolve-url-loader": "^5.0.0" + "resolve-url-loader": "^5.0.0", + "yaml": "^2.2.2" } } diff --git a/nerfstudio/viewer/app/yarn.lock b/nerfstudio/viewer/app/yarn.lock index af3bb2979..24d156e1f 100644 --- a/nerfstudio/viewer/app/yarn.lock +++ b/nerfstudio/viewer/app/yarn.lock @@ -10257,10 +10257,10 @@ yallist@^4.0.0: resolved "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz" integrity sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A== -yaml@^1.10.0, yaml@^1.10.2, yaml@^1.7.2: - version "1.10.2" - resolved "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz" - integrity sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg== +yaml@^1.10.0, yaml@^1.10.2, yaml@^1.7.2, yaml@^2.2.2: + version "2.2.2" + resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.2.2.tgz#ec551ef37326e6d42872dad1970300f8eb83a073" + integrity sha512-CBKFWExMn46Foo4cldiChEzn7S7SRV+wqiluAb6xmueD/fGyRHIhX8m14vVGgeFWjN540nKCNVj6P21eQjgTuA== yargs-parser@^20.2.2: version "20.2.9"