Skip to content

Commit 45137eb

Browse files
Claude (Webhook)claude
andcommitted
fix(deps): Update tar and vite to resolve security vulnerabilities (GHSA-vmf3-w455-68vh, GHSA-v6wh-96g9-6wx3, GHSA-fx2h-pf6j-xcff)
Add npm overrides for tar >=7.5.16 and vite >=8.0.16 to fix: - tar: PAX size override file smuggling vulnerability (moderate) - vite: NTLMv2 hash disclosure via UNC path handling (high) - vite: server.fs.deny bypass on Windows alternate paths (high) This resolves the Security workflow failure (run #154). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent ee67acc commit 45137eb

2 files changed

Lines changed: 94 additions & 92 deletions

File tree

package-lock.json

Lines changed: 91 additions & 91 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -86,6 +86,8 @@
8686
"overrides": {
8787
"postcss": ">=8.5.10",
8888
"brace-expansion": ">=5.0.6",
89-
"esbuild": ">=0.28.1"
89+
"esbuild": ">=0.28.1",
90+
"tar": ">=7.5.16",
91+
"vite": ">=8.0.16"
9092
}
9193
}

0 commit comments

Comments
 (0)