MC-1575: addressing critical CVE alerts (mysql2)

Pocket · Oct 30, 2024 · 94e1286 · 94e1286
1 parent fbccfa7
commit 94e1286
Show file tree

Hide file tree

Showing 4 changed files with 80 additions and 38 deletions.
diff --git a/bin/package-lock.json b/bin/package-lock.json
diff --git a/bin/package.json b/bin/package.json
@@ -11,7 +11,7 @@
   "license": "ISC",
   "dependencies": {
     "knex": "^3.0.1",
-    "mysql2": "^3.6.3"
+    "mysql2": ">=3.9.8"
   },
   "devDependencies": {
     "ts-node": "^10.9.1",

diff --git a/curation-migration-datasync/package-lock.json b/curation-migration-datasync/package-lock.json
diff --git a/curation-migration-datasync/package.json b/curation-migration-datasync/package.json
@@ -20,7 +20,7 @@
     "aws-lambda": "^1.0.7",
     "exponential-backoff": "^3.1.1",
     "knex": "^3.0.1",
-    "mysql2": "^3.6.3",
+    "mysql2": ">=3.9.8",
     "node-fetch": "^2.6.9"
   }
 }