From 583a62b58a752d660d3b7be9617f9936cbce57e1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 1 Oct 2023 21:44:11 +0000 Subject: [PATCH] fix: packages/react-scripts/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-POSTCSS-5926692 --- packages/react-scripts/package.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/packages/react-scripts/package.json b/packages/react-scripts/package.json index 3f7c4daa777..a27e03faf8a 100644 --- a/packages/react-scripts/package.json +++ b/packages/react-scripts/package.json @@ -21,7 +21,7 @@ "react-scripts": "./bin/react-scripts.js" }, "dependencies": { - "autoprefixer": "7.1.6", + "autoprefixer": "10.0.0", "babel-core": "6.26.0", "babel-eslint": "7.2.3", "babel-jest": "20.0.3", @@ -30,7 +30,7 @@ "babel-runtime": "6.26.0", "case-sensitive-paths-webpack-plugin": "2.1.1", "chalk": "1.1.3", - "css-loader": "0.28.7", + "css-loader": "5.0.0", "dotenv": "4.0.0", "eslint": "4.10.0", "eslint-config-airbnb": "^15.1.0", @@ -48,8 +48,8 @@ "jest": "20.0.4", "node-sass": "^4.6.0", "object-assign": "4.1.1", - "postcss-flexbugs-fixes": "3.2.0", - "postcss-loader": "2.0.8", + "postcss-flexbugs-fixes": "5.0.0", + "postcss-loader": "4.0.0", "promise": "7.1.1", "react-dev-utils": "^3.0.2", "react-error-overlay": "^1.0.9",