Skip to content

Commit f8f90cb

Browse files
authored
fix(deps): upgrade typeorm to 0.3.28 to address security vulnerabilities (#2333)
Upgrade typeorm from 0.3.12 to 0.3.28 to resolve multiple security vulnerabilities. Fixes high severity SQL injection vulnerability in typeorm (CVE present in <0.3.26). Removes Windows-specific postinstall workaround that's no longer needed.The fix for #478 was a workaround and is now resolved upstream see (typeorm/typeorm#9766). The issue was specifically with TypeORM 0.3.12's glob pattern handling on Windows. fix #478
1 parent 65844a2 commit f8f90cb

3 files changed

Lines changed: 705 additions & 520 deletions

File tree

package.json

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,6 @@
55
"packageManager": "pnpm@10.24.0",
66
"scripts": {
77
"preinstall": "npx only-allow pnpm",
8-
"postinstall": "node postinstall-win.js",
98
"dev": "nodemon -e ts --watch server --watch seerr-api.yml -e .json,.ts,.yml -x ts-node -r tsconfig-paths/register --files --project server/tsconfig.json server/index.ts",
109
"build:server": "tsc --project server/tsconfig.json && copyfiles -u 2 server/templates/**/*.{html,pug} dist/templates && tsc-alias -p server/tsconfig.json",
1110
"build:next": "next build",
@@ -103,7 +102,7 @@
103102
"swagger-ui-express": "4.6.2",
104103
"swr": "2.3.7",
105104
"tailwind-merge": "^2.6.0",
106-
"typeorm": "0.3.12",
105+
"typeorm": "0.3.28",
107106
"ua-parser-js": "^1.0.35",
108107
"undici": "^7.16.0",
109108
"validator": "^13.15.23",

0 commit comments

Comments
 (0)