Skip to content

Commit c60a572

Browse files
Fix: Cleanup and patch vulnerable dependencies (#93)
- Removed unused dependency `crypto-js` to eliminate associated vulnerability (CVE-2023-46233) - Upgraded `smol-toml` to patched version to address reported security advisories (GHSA-pqhp-25j4-6hq9 and GHSA-v3rj-xjv7-4jmq)
1 parent 3db6304 commit c60a572

4 files changed

Lines changed: 13 additions & 24 deletions

File tree

index.html

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -573,7 +573,6 @@ <h4 class="mb-4" style="color: #e63f36;"><b>Using CORS Proxy for External TOML F
573573
<!-- Third party libraries-->
574574
<script src="node_modules/xterm/lib/xterm.js"></script>
575575
<script src="node_modules/xterm-addon-fit/lib/xterm-addon-fit.js"></script>
576-
<script src="node_modules/crypto-js/crypto-js.js"></script>
577576
<script src="https://cdnjs.cloudflare.com/ajax/libs/pako/2.0.3/pako.js"></script>
578577
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
579578
<script src="https://cdnjs.cloudflare.com/ajax/libs/showdown/2.1.0/showdown.min.js"></script>

minimal-launchpad/index.html

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -277,7 +277,6 @@ <h4 class="topic" data-target-tab-panel-id="about">
277277
<!-- Third party libraries-->
278278
<script src="../node_modules/xterm/lib/xterm.js"></script>
279279
<script src="../node_modules/xterm-addon-fit/lib/xterm-addon-fit.js"></script>
280-
<script src="../node_modules/crypto-js/crypto-js.js"></script>
281280
<script src="https://cdnjs.cloudflare.com/ajax/libs/pako/2.0.3/pako.js"></script>
282281
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
283282
<script src="https://cdnjs.cloudflare.com/ajax/libs/showdown/2.1.0/showdown.min.js"></script>

package-lock.json

Lines changed: 12 additions & 20 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,8 @@
11
{
22
"name": "esp-launchpad",
33
"dependencies": {
4-
"crypto-js": "^4.1.1",
54
"esptool-js": "^0.5.4",
6-
"smol-toml": "^1.1.2",
5+
"smol-toml": "^1.6.1",
76
"xterm": "^4.17.0",
87
"xterm-addon-fit": "^0.5.0"
98
}

0 commit comments

Comments
 (0)