fix(Code Node): Update vm2 to address CVE-2023-29017 (n8n-io#5947)

Update vm2 to fix CVE-2023-29017 GH advisory: GHSA-7jxr-cg7f-gpgv Co-authored-by: Loganaden Velvindron <logan@cyberstorm.mu>
fl-g6 · Apr 24, 2023 · 9c81a94 · 9c81a94
1 parent 08f65d3
commit 9c81a94
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 14 deletions.
diff --git a/packages/nodes-base/package.json b/packages/nodes-base/package.json
@@ -463,7 +463,7 @@
     "ssh2-sftp-client": "^7.0.0",
     "tmp-promise": "^3.0.2",
     "uuid": "^8.3.2",
-    "vm2": "~3.9.5",
+    "vm2": "~3.9.15",
     "xlsx": "^0.17.0",
     "xml2js": "^0.4.23"
   }

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml