Skip to content

Commit 4e5190e

Browse files
remyluslosiusclaude
andcommitted
fix(security): Update npm packages to fix HIGH severity vulnerabilities
Fixed 3 vulnerabilities (2 HIGH, 1 MODERATE) in frontend dependencies: Security Vulnerabilities Fixed: 1. playwright@1.55.0 → 1.56.1 (HIGH) - CVE: GHSA-7mvr-c777-76hp - Issue: Downloads browsers without SSL certificate verification - Risk: Man-in-the-Middle attack during browser download - CWE-347: Improper Verification of Cryptographic Signature 2. @playwright/test@1.55.0 → 1.56.1 (HIGH) - Transitive dependency vulnerability (from playwright) - Same SSL certificate verification issue 3. vite@7.1.5 → 7.1.6 (MODERATE) - Updated to latest patched version Impact Assessment: - Risk Level: MEDIUM (dev dependencies only, not in production runtime) - Attack Surface: CI/CD and developer machines during npm install - Priority: P1 (defense-in-depth security) Verification: - npm audit: 0 vulnerabilities found ✅ - All packages updated to secure versions ✅ Command Used: npm audit fix Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
1 parent 1431cd8 commit 4e5190e

2 files changed

Lines changed: 22 additions & 21 deletions

File tree

frontend/package-lock.json

Lines changed: 14 additions & 14 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package-lock.json

Lines changed: 8 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)