From e7ea0ec92b41860411cbef1f8e11e300e78b0b9c Mon Sep 17 00:00:00 2001
From: Kimberly Baldauf <107082171+k-baldauf@users.noreply.github.com>
Date: Wed, 11 Oct 2023 15:53:40 +0900
Subject: [PATCH] fix(tablekit-react-select): allow maxMenuHeight to work

---
 auditjs.json                      | 19 +++++++++++++++++++
 system/react-select/src/index.tsx |  5 +++--
 2 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/auditjs.json b/auditjs.json
index 1ff45e06d..7a5ca32f5 100644
--- a/auditjs.json
+++ b/auditjs.json
@@ -1100,6 +1100,22 @@
           "reference": "https://ossindex.sonatype.org/vulnerability/CVE-2023-26144?component-type=npm&component-name=graphql&utm_source=auditjs&utm_medium=integration&utm_content=4.0.39"
         }
       ]
+    },
+    {
+      "coordinates": "pkg:npm/postcss@7.0.39",
+      "description": "Tool for transforming styles with JS plugins",
+      "reference": "https://ossindex.sonatype.org/component/pkg:npm/postcss@7.0.39?utm_source=auditjs&utm_medium=integration&utm_content=4.0.39",
+      "vulnerabilities": [
+        {
+          "id": "CVE-2023-44270",
+          "title": "[CVE-2023-44270] CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')",
+          "description": "An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.",
+          "cvssScore": 5.3,
+          "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+          "cve": "CVE-2023-44270",
+          "reference": "https://ossindex.sonatype.org/vulnerability/CVE-2023-44270?component-type=npm&component-name=postcss&utm_source=auditjs&utm_medium=integration&utm_content=4.0.39"
+        }
+      ]
     }
   ],
   "ignore": [
@@ -1312,6 +1328,9 @@
     },
     {
       "id": "CVE-2023-26144"
+    },
+    {
+      "id": "CVE-2023-44270"
     }
   ]
 }
diff --git a/system/react-select/src/index.tsx b/system/react-select/src/index.tsx
index 0f08748a5..ba64d4465 100644
--- a/system/react-select/src/index.tsx
+++ b/system/react-select/src/index.tsx
@@ -396,9 +396,10 @@ export function useReactSelectConfig<
         ...styles,
         ...menuStylesObject
       }),
-      menuList: (styles) => ({
+      menuList: (styles, { maxHeight }) => ({
         ...styles,
-        ...menuListStylesObject
+        ...menuListStylesObject,
+        maxHeight: `${maxHeight}px !important`
       }),
       option: (styles, { isFocused, isSelected }) => {
         let stateStyles = {};