Manually removed vulnerability by upgrading 'tar' package from 2.2.1 to 4.4.8 (https://stackoverflow.com/questions/55635378/angular-devkit-build-angular-arbitrary-file-overwrite). angular-devkit and node-sass issues are still open. (https://github.com/angular/angular-cli/issues/14138, https://github.com/sass/node-sass/issues/2625). Will permanently be fixed once above 2 issues are addressed by Angular and node-sass teams.
pull/121/head
ShahanaFarooqui 5 years ago
parent 0cd830f002
commit 79e34ee283

592
package-lock.json generated

File diff suppressed because it is too large Load Diff

@ -51,8 +51,8 @@
"zone.js": "~0.8.26"
},
"devDependencies": {
"@angular-devkit/build-angular": "^0.13.6",
"@angular/cli": "~7.1.4",
"@angular-devkit/build-angular": "^0.13.8",
"@angular/cli": "^7.3.8",
"@angular/compiler-cli": "^7.2.9",
"@angular/language-service": "^7.0.0",
"@types/jasmine": "~2.8.8",

Loading…
Cancel
Save