Commit 4e5190e
fix(security): Update npm packages to fix HIGH severity vulnerabilities
Fixed 3 vulnerabilities (2 HIGH, 1 MODERATE) in frontend dependencies:
Security Vulnerabilities Fixed:
1. playwright@1.55.0 → 1.56.1 (HIGH)
- CVE: GHSA-7mvr-c777-76hp
- Issue: Downloads browsers without SSL certificate verification
- Risk: Man-in-the-Middle attack during browser download
- CWE-347: Improper Verification of Cryptographic Signature
2. @playwright/test@1.55.0 → 1.56.1 (HIGH)
- Transitive dependency vulnerability (from playwright)
- Same SSL certificate verification issue
3. vite@7.1.5 → 7.1.6 (MODERATE)
- Updated to latest patched version
Impact Assessment:
- Risk Level: MEDIUM (dev dependencies only, not in production runtime)
- Attack Surface: CI/CD and developer machines during npm install
- Priority: P1 (defense-in-depth security)
Verification:
- npm audit: 0 vulnerabilities found ✅
- All packages updated to secure versions ✅
Command Used:
npm audit fix
Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>1 parent 1431cd8 commit 4e5190e
2 files changed
Lines changed: 22 additions & 21 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments