Commit e977c15
committed
fix: update dependency overrides for security vulnerabilities
Add pnpm overrides for 7 audit findings (3 high, 4 moderate):
- undici >=7.24.0 (via wrangler>miniflare): WebSocket 64-bit length overflow crash, unbounded memory in permessage-deflate decompression, unhandled exception from invalid server_max_window_bits, HTTP request/response smuggling, CRLF injection via upgrade option, unbounded memory in DeduplicationHandler response buffering
- brace-expansion >=5.0.5 (via eslint>minimatch): zero-step sequence causes process hang and memory exhaustion1 parent bc476e4 commit e977c15
2 files changed
Lines changed: 15 additions & 9 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
98 | 98 | | |
99 | 99 | | |
100 | 100 | | |
101 | | - | |
| 101 | + | |
| 102 | + | |
| 103 | + | |
| 104 | + | |
102 | 105 | | |
103 | 106 | | |
104 | 107 | | |
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments