From c9f8e407df5b562f44a9333508255332be5303bf Mon Sep 17 00:00:00 2001 From: sethkfman <10342624+sethkfman@users.noreply.github.com> Date: Wed, 28 Jun 2023 17:11:18 -0600 Subject: [PATCH] update release branch with yarn audit fix from main (#6721) --- .iyarc | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.iyarc b/.iyarc index f7c029f38d3..c96c8d176c8 100644 --- a/.iyarc +++ b/.iyarc @@ -1,3 +1,5 @@ +# Excluded and patched using this current patch patches/request+2.88.2.patch GHSA-p8p7-x288-28g6 - # excluded and patched using this current patch patches/request+2.88.2.patch - # improved-yarn-audit advisory exclusions + +# ReDoS vulnerability, no impact to this application, and fix not backported yet to the versions we use +GHSA-c2qf-rxjj-qqgw