From 536ce2e9cfc3987b7596216223ce40dfbc9603e9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Genevi=C3=A8ve=20Bastien?= Date: Fri, 28 Jun 2024 14:50:22 -0400 Subject: [PATCH] dep: Upgrade @xmldom/xmldom to ^0.8.10 The @xmldom/xmldom <0.8.4 has a critical vulnerability issue that is fixed with 0.8.4. Since osmtogeojson does not require a specific version of the package, it is set to use the latest compatible. The following vulnerability is fixed with the upgrade: https://security.snyk.io/vuln/SNYK-JS-XMLDOMXMLDOM-3092934 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 308b9bc..e0195a6 100644 --- a/package.json +++ b/package.json @@ -28,7 +28,7 @@ }, "dependencies": { "@mapbox/geojson-rewind": "0.5.2", - "@xmldom/xmldom": "0.8.3", + "@xmldom/xmldom": "^0.8.10", "concat-stream": "2.0.0", "geojson-numeric": "0.2.1", "htmlparser2": "3.5.1",