Skip to content

Commit 9caacdb

Browse files
peppescgclaude
andcommitted
Fix hono and postcss transitive vulnerabilities via pnpm overrides
- hono: ^4.12.12 → >=4.12.14 (GHSA-458j-xx4x-4375, HTML injection in JSX SSR) - postcss: added >=8.5.10 override (GHSA-qx2v-qp2m-jg93, XSS via </style>) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent 4484b9d commit 9caacdb

2 files changed

Lines changed: 19 additions & 37 deletions

File tree

package.json

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -116,7 +116,7 @@
116116
"express-rate-limit": ">=8.2.2",
117117
"lodash": ">=4.17.23",
118118
"lodash-es": ">=4.17.23",
119-
"hono": "^4.12.12",
119+
"hono": ">=4.12.14",
120120
"@hono/node-server": "^1.19.13",
121121
"defu": "^6.1.5",
122122
"rollup": ">=4.59.0",
@@ -126,7 +126,8 @@
126126
"qs": ">=6.14.2",
127127
"yaml": ">=2.8.3",
128128
"path-to-regexp@>=8.0.0 <8.4.0": "8.4.0",
129-
"path-to-regexp@>=0.1.0 <0.1.13": "0.1.13"
129+
"path-to-regexp@>=0.1.0 <0.1.13": "0.1.13",
130+
"postcss": ">=8.5.10"
130131
}
131132
}
132133
}

pnpm-lock.yaml

Lines changed: 16 additions & 35 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)