From cd0c690454f1f214a8605c2e069a17f3cc233cb4 Mon Sep 17 00:00:00 2001 From: robbond Date: Wed, 4 Nov 2026 06:25:47 +0000 Subject: [PATCH] fix(deps): update react-cookie-consent to address js-cookie vulnerability --- package-lock.json | 17 +++++++++++------ package.json | 2 +- 2 files changed, 12 insertions(+), 7 deletions(-) diff --git a/package-lock.json b/package-lock.json index a2b7cef7..080300ec 100644 --- a/package-lock.json +++ b/package-lock.json @@ -57,7 +57,7 @@ "react": "^18.2.0", "react-accessible-accordion": "^5.0.0", "react-autosuggest": "^10.1.0", - "react-cookie-consent": "^9.0.0", + "react-cookie-consent": "^10.0.2", "react-datepicker": "4.24.0", "react-dom": "^18.2.0", "react-dropzone": "^14.2.3", @@ -6297,7 +6297,9 @@ } }, "node_modules/js-cookie": { - "version": "2.2.1", + "version": "3.0.8", + "resolved": "https://registry.npmjs.org/js-cookie/-/js-cookie-3.0.8.tgz", + "integrity": "sha512-yeJd4aNAdYZQjaon2bpD/Gb0B/omw7HQOsynXXcOiWVCacbBcPlgn8S/d1X6blFSaHao7ozqtW7NZW19xpCtIw==", "license": "MIT" }, "node_modules/js-tokens": { @@ -7958,16 +7960,19 @@ } }, "node_modules/react-cookie-consent": { - "version": "9.0.0", + "version": "10.0.2", + "resolved": "https://registry.npmjs.org/react-cookie-consent/-/react-cookie-consent-10.0.2.tgz", + "integrity": "sha512-YNmtbRHVmSxXnPjKadXyKP60UN/2UF6gvAlmzQLyQX13kGr2j+FmIFEnlx58yQeRYkAW/DNod23sz0c17gpPFw==", "license": "MIT", "dependencies": { - "js-cookie": "^2.2.1" + "js-cookie": "^3.0.8" }, "engines": { - "node": ">=10" + "node": ">=20.16" }, "peerDependencies": { - "react": ">=16" + "react": ">=18", + "react-dom": ">=18" } }, "node_modules/react-datepicker": { diff --git a/package.json b/package.json index 26239fdf..9e0f536d 100644 --- a/package.json +++ b/package.json @@ -79,7 +79,7 @@ "react": "^18.2.0", "react-accessible-accordion": "^5.0.0", "react-autosuggest": "^10.1.0", - "react-cookie-consent": "^9.0.0", + "react-cookie-consent": "^10.0.2", "react-datepicker": "4.24.0", "react-dom": "^18.2.0", "react-dropzone": "^14.2.3",