From b97c6fcc93ba92b9fb15ed99bf445001ff428707 Mon Sep 17 00:00:00 2001 From: Haider Alshamma Date: Thu, 6 Jun 2019 11:21:58 -0400 Subject: [PATCH] Update svgo dependency to latest version This is to resolve the Code Injection vulnerability with the js-yaml package that svgo depends on. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 293f68e..42a8b62 100644 --- a/package.json +++ b/package.json @@ -50,6 +50,6 @@ "@babel/parser": "^7.0.0", "lodash.isplainobject": "^4.0.6", "resolve": "^1.10.0", - "svgo": "^0.7.2" + "svgo": "^1.2.2" } }