From 0c3b3eaa31afe6129e1b749c2356ae43aae1eb0d Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Fri, 19 Jun 2026 12:12:36 +0000 Subject: [PATCH] fix: CVE-2025-27152 security vulnerability Automated dependency upgrade by OrbisAI Security --- .github/package.json | 5 ++++- .github/pnpm-lock.yaml | 19 ++++++++++++++++++- 2 files changed, 22 insertions(+), 2 deletions(-) diff --git a/.github/package.json b/.github/package.json index a59d9a3884b2..b43469a944aa 100644 --- a/.github/package.json +++ b/.github/package.json @@ -1,5 +1,8 @@ { "name": "next-github-workflows", "private": true, - "packageManager": "pnpm@10.33.0" + "packageManager": "pnpm@10.33.0", + "dependencies": { + "axios": "1.8.2" + } } diff --git a/.github/pnpm-lock.yaml b/.github/pnpm-lock.yaml index 004c92e24e2e..e8ac77ef0ee2 100644 --- a/.github/pnpm-lock.yaml +++ b/.github/pnpm-lock.yaml @@ -7,7 +7,11 @@ settings: importers: - .: {} + .: + dependencies: + axios: + specifier: 1.8.2 + version: 1.8.2 actions/needs-triage: dependencies: @@ -466,10 +470,12 @@ packages: '@vercel/kv@0.2.4': resolution: {integrity: sha512-wbIOOXhg6MzmNMzKFSWbbLAS65hCZcJN33z1coENzI1M0fOX55yE9v9LwVGqkzdItp3eZsv6pYvwcmGtllyLTw==} engines: {node: '>=14.6'} + deprecated: 'Vercel KV is deprecated. If you had an existing KV store, it should have moved to Upstash Redis which you will see under Vercel Integrations. For new projects, install a Redis integration from Vercel Marketplace: https://vercel.com/marketplace?category=storage&search=redis' '@vercel/kv@1.0.1': resolution: {integrity: sha512-uTKddsqVYS2GRAM/QMNNXCTuw9N742mLoGRXoNDcyECaxEXvIHG0dEY+ZnYISV4Vz534VwJO+64fd9XeSggSKw==} engines: {node: '>=14.6'} + deprecated: 'Vercel KV is deprecated. If you had an existing KV store, it should have moved to Upstash Redis which you will see under Vercel Integrations. For new projects, install a Redis integration from Vercel Marketplace: https://vercel.com/marketplace?category=storage&search=redis' '@vercel/ncc@0.38.4': resolution: {integrity: sha512-8LwjnlP39s08C08J5NstzriPvW1SP8Zfpp1BvC2sI35kPeZnHfxVkCwu4/+Wodgnd60UtT1n8K8zw+Mp7J9JmQ==} @@ -550,6 +556,9 @@ packages: axios@1.7.9: resolution: {integrity: sha512-LhLcE7Hbiryz8oMDdDptSrWowmB4Bl6RCt6sIJKpRB4XtVf0iEgewX3au/pJqm+Py1kCASkb/FFKjxQaLtxJvw==} + axios@1.8.2: + resolution: {integrity: sha512-ls4GYBm5aig9vWx8AWDSGLpnpDQRtWAfrjU+EuytuODrFBkqesN2RkOQCBzrA1RQNHw1SmRMSDDDSwzNAYQ6Rg==} + axobject-query@4.1.0: resolution: {integrity: sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==} engines: {node: '>= 0.4'} @@ -1683,6 +1692,14 @@ snapshots: transitivePeerDependencies: - debug + axios@1.8.2: + dependencies: + follow-redirects: 1.15.9 + form-data: 4.0.1 + proxy-from-env: 1.1.0 + transitivePeerDependencies: + - debug + axobject-query@4.1.0: {} bail@1.0.5: {}