Skip to content

Commit 5a8cc9b

Browse files
raphael-intuglesujayintugle
authored andcommitted
fix(security): resolve uuid CVE via npm override to v11.1.1
- Add uuid ^11.1.1 override in docsite/package.json - Update package-lock.json: uuid 8.3.2 -> 11.1.1 - Resolves: Missing buffer bounds check in v3/v5/v6 when buf is provided - Verified: npm audit passes uuid check, build & typecheck pass
1 parent 1b58d01 commit 5a8cc9b

2 files changed

Lines changed: 10 additions & 5 deletions

File tree

docsite/package-lock.json

Lines changed: 8 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

docsite/package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,8 @@
4040
"minimatch": "^3.1.4",
4141
"ajv": "^8.18.0",
4242
"qs": "^6.14.2",
43-
"webpack": "^5.104.1"
43+
"webpack": "^5.104.1",
44+
"uuid": "^11.1.1"
4445
},
4546
"browserslist": {
4647
"production": [

0 commit comments

Comments
 (0)