From 272fb6d45b8f102ec646d9d95a612ec26504f88b Mon Sep 17 00:00:00 2001 From: Eilia Araghbidikashani Date: Thu, 2 Oct 2025 21:00:54 +0000 Subject: [PATCH] Fix CVE-2025-59343: Upgrade tar-fs from 2.1.1 to 2.1.4 --- patched-vscode/yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/patched-vscode/yarn.lock b/patched-vscode/yarn.lock index 4d02c39b1..8c7669c8f 100644 --- a/patched-vscode/yarn.lock +++ b/patched-vscode/yarn.lock @@ -9605,9 +9605,9 @@ tapable@^2.1.1, tapable@^2.2.0: integrity sha512-FBk4IesMV1rBxX2tfiK8RAmogtWn53puLOQlvO8XuwlgxcYbP4mVPS9Ph4aeamSyyVjOl24aYWAuc8U5kCVwMw== tar-fs@^2.0.0: - version "2.1.1" - resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-2.1.1.tgz#489a15ab85f1f0befabb370b7de4f9eb5cbe8784" - integrity sha512-V0r2Y9scmbDRLCNex/+hYzvp/zyYjvFbHPNgVTKfQvVrb6guiE/fxP+XblDNR011utopbkex2nM4dHNV6GDsng== + version "2.1.4" + resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-2.1.4.tgz#800824dbf4ef06ded9afea4acafe71c67c76b930" + integrity sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ== dependencies: chownr "^1.1.1" mkdirp-classic "^0.5.2"