Commit 449229e
committed
security: pnpm override cross-spawn to ^7.0.6
npm-run-all@4.1.5 still resolves cross-spawn 6.0.5 under its semver range;
execa via serve pulled 7.0.3. Force patched 7.0.6+ for all instances to
address cross-spawn ReDoS advisories (GHSA-3xgq-45jj-v275).
Made-with: Cursor1 parent 5e53051 commit 449229e
2 files changed
+21
-344
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
53 | 53 | | |
54 | 54 | | |
55 | 55 | | |
| 56 | + | |
| 57 | + | |
| 58 | + | |
| 59 | + | |
| 60 | + | |
56 | 61 | | |
57 | 62 | | |
58 | 63 | | |
| |||
0 commit comments