From 5adb7b38817fc8da1b5a5618539b83f981e416de Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 31 Oct 2025 11:45:53 +0000 Subject: [PATCH] fix: ui/package.json & ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-VALIDATOR-13395830 --- ui/package.json | 2 +- ui/yarn.lock | 7 ++++--- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/ui/package.json b/ui/package.json index d5b1a909a..fb203807f 100644 --- a/ui/package.json +++ b/ui/package.json @@ -55,7 +55,7 @@ "react-tap-event-plugin": "^2.0.1", "redux": "^3.5.2", "redux-immutable": "^3.0.11", - "validator": "^6.1.0", + "validator": "^13.15.20", "whatwg-fetch": "^2.0.3" }, "devDependencies": { diff --git a/ui/yarn.lock b/ui/yarn.lock index 0a77835c3..929929902 100644 --- a/ui/yarn.lock +++ b/ui/yarn.lock @@ -5791,9 +5791,10 @@ validate-npm-package-license@^3.0.1: spdx-correct "~1.0.0" spdx-expression-parse "~1.0.0" -validator@^6.1.0: - version "6.2.1" - resolved "https://registry.yarnpkg.com/validator/-/validator-6.2.1.tgz#bc575b78d15beb2e338a665ba9530c7f409ef667" +validator@^13.15.20: + version "13.15.20" + resolved "https://registry.yarnpkg.com/validator/-/validator-13.15.20.tgz#054e9238109538a1bf46ae3e1290845a64fa2186" + integrity sha512-KxPOq3V2LmfQPP4eqf3Mq/zrT0Dqp2Vmx2Bn285LwVahLc+CsxOM0crBHczm8ijlcjZ0Q5Xd6LW3z3odTPnlrw== vary@~1.1.0: version "1.1.0"