add fix for CVE-2024-4068 (#56)

awslabs · Jun 11, 2024 · fddf7cd · fddf7cd
1 parent 0704d1d
commit fddf7cd
Show file tree

Hide file tree

Showing 5 changed files with 17 additions and 9 deletions.
diff --git a/.projen/deps.json b/.projen/deps.json
diff --git a/.projen/tasks.json b/.projen/tasks.json
diff --git a/.projenrc.ts b/.projenrc.ts
@@ -44,6 +44,7 @@ const project = new awscdk.AwsCdkConstructLibrary({
     `aws-cdk@${CDK_VERSION}`,
     'eslint-plugin-header',
     `@aws-cdk/aws-kinesisfirehose-alpha@${CDK_VERSION}-alpha.0`,
+    `braces@>=3.0.3`, // fixes CVE-2024-4068
   ],
   github: true,
   jsiiVersion: JSII_VERSION,

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json