Skip to content

Commit 66b48de

Browse files
chargomeclaude
andauthored
fix(deps): update lockfile to resolve h3@1.15.10 (#19933)
Fixes Dependabot alerts #1236 (SSE Event Injection) and #1237 (Path Traversal via Double Decoding) by updating the yarn.lock resolution for h3 from 1.15.5 to 1.15.10. Easier fix than #19910 as Nuxt 3.21.x introduced breaking type changes (removed nitro from NuxtOptions and nitro:config from NuxtHooks). Co-authored-by: Claude Sonnet 4 <noreply@anthropic.com>
1 parent 907d06c commit 66b48de

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18501,9 +18501,9 @@ h3@1.15.3:
1850118501
uncrypto "^0.1.3"
1850218502

1850318503
h3@^1.10.0, h3@^1.12.0, h3@^1.15.3, h3@^1.15.5:
18504-
version "1.15.5"
18505-
resolved "https://registry.yarnpkg.com/h3/-/h3-1.15.5.tgz#e2f28d4a66a249973bb050eaddb06b9ab55506f8"
18506-
integrity sha512-xEyq3rSl+dhGX2Lm0+eFQIAzlDN6Fs0EcC4f7BNUmzaRX/PTzeuM+Tr2lHB8FoXggsQIeXLj8EDVgs5ywxyxmg==
18504+
version "1.15.10"
18505+
resolved "https://registry.yarnpkg.com/h3/-/h3-1.15.10.tgz#defe650df7b70cf585d2020c4146fb580cfb0d42"
18506+
integrity sha512-YzJeWSkDZxAhvmp8dexjRK5hxziRO7I9m0N53WhvYL5NiWfkUkzssVzY9jvGu0HBoLFW6+duYmNSn6MaZBCCtg==
1850718507
dependencies:
1850818508
cookie-es "^1.2.2"
1850918509
crossws "^0.3.5"

0 commit comments

Comments
 (0)