From 0388e627595fb58db35fff994226dcba3b4e6afe Mon Sep 17 00:00:00 2001 From: Francesco Renzi Date: Fri, 16 Sep 2022 13:46:01 +0000 Subject: [PATCH] Add parse-url to audit allow list --- scripts/audit-allow-list | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/scripts/audit-allow-list b/scripts/audit-allow-list index 761b9a2c..c7c60553 100755 --- a/scripts/audit-allow-list +++ b/scripts/audit-allow-list @@ -54,6 +54,16 @@ const AUDIT_ALLOW_LIST = [ path: "lerna>@lerna/version>@lerna/conventional-commits>conventional-changelog-core>get-pkg-repo>meow>trim-newlines", advisoryUrl: "https://www.npmjs.com/advisories/1753", justification: "dependency of lerna (dev only); low severity" + }, + { + path: "lerna>@lerna/version>@lerna/github-client>git-url-parse>git-up>parse-url", + advisoryUrl: "https://github.com/advisories/GHSA-j9fq-vwqv-2fm2", + justification: "dependency of lerna; moderate severity" + }, + { + path: "lerna>@lerna/publish>@lerna/version>@lerna/github-client>git-url-parse>git-up>parse-url", + advisoryUrl: "https://github.com/advisories/GHSA-j9fq-vwqv-2fm2", + justification: "dependency of lerna; moderate severity" } ] @@ -86,4 +96,4 @@ if (numVulnerabilities > 0) { console.log(`Found ${numVulnerabilities} unrecognized vulnerabilit${pluralized} from \`npm audit\`:`) console.log(JSON.stringify(remainingVulnerabilities, null, 2)) process.exit(1) -} \ No newline at end of file +}