Skip to content

Commit 7bb3177

Browse files
author
Evaggelos Balaskas
committed
chore(deps): force 3 CVE-flagged transitives via yarn resolutions
- @tootallnate/once 1.1.2 -> ^2.0.1 (CVE-2026-3449, jest test dep) - open 0.0.5 -> ^6.0.0 (command injection, webpack-dev-server dep) - braces 1.8.5 -> ^3.0.3 (uncontrolled resource consumption, nested dep)
1 parent 4ce506c commit 7bb3177

2 files changed

Lines changed: 20 additions & 21 deletions

File tree

package.json

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -258,6 +258,9 @@
258258
"react-router/path-to-regexp": "^1.9.0",
259259
"@babel/runtime": "^7.26.10",
260260
"merge": "^2.1.1",
261-
"d3-color": "^3.1.0"
261+
"d3-color": "^3.1.0",
262+
"@tootallnate/once": "^2.0.1",
263+
"open": "^6.0.0",
264+
"braces": "^3.0.3"
262265
}
263266
}

yarn.lock

Lines changed: 16 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1363,10 +1363,10 @@
13631363
dependencies:
13641364
defer-to-connect "^2.0.0"
13651365

1366-
"@tootallnate/once@1":
1367-
version "1.1.2"
1368-
resolved "https://registry.yarnpkg.com/@tootallnate/once/-/once-1.1.2.tgz#ccb91445360179a04e7fe6aff78c00ffc1eeaf82"
1369-
integrity sha512-RbzJvlNzmRq5c3O09UipeuXno4tA1FE6ikOjxZK0tuxVv3412l64l5t1W5pj4+rJq9vpkm/kwiR07aZXnsKPxw==
1366+
"@tootallnate/once@1", "@tootallnate/once@^2.0.1":
1367+
version "2.0.1"
1368+
resolved "https://registry.yarnpkg.com/@tootallnate/once/-/once-2.0.1.tgz#35adc6222e3662fa2222ce123b961476a746b9ea"
1369+
integrity sha512-HqmEUIGRJ5fSXchkVgR5F7qn48bDBzv0kWj/Kfu5e6uci4UlEeng4331LnBkWffb++Ei3FOVLxo8JJWMFBDMeQ==
13701370

13711371
"@types/babel__core@^7.0.0", "@types/babel__core@^7.1.14":
13721372
version "7.20.5"
@@ -2615,15 +2615,7 @@ brace-expansion@^1.1.15, brace-expansion@^1.1.7:
26152615
balanced-match "^1.0.0"
26162616
concat-map "0.0.1"
26172617

2618-
braces@^1.8.2:
2619-
version "1.8.5"
2620-
resolved "https://registry.yarnpkg.com/braces/-/braces-1.8.5.tgz#ba77962e12dff969d6b76711e914b737857bf6a7"
2621-
dependencies:
2622-
expand-range "^1.8.1"
2623-
preserve "^0.2.0"
2624-
repeat-element "^1.1.2"
2625-
2626-
braces@^3.0.3:
2618+
braces@^1.8.2, braces@^3.0.3:
26272619
version "3.0.3"
26282620
resolved "https://registry.yarnpkg.com/braces/-/braces-3.0.3.tgz#490332f40919452272d55a8480adc0c441358789"
26292621
integrity sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==
@@ -6276,6 +6268,11 @@ is-windows@^1.0.1:
62766268
version "1.0.2"
62776269
resolved "https://registry.yarnpkg.com/is-windows/-/is-windows-1.0.2.tgz#d1850eb9791ecd18e6182ce12a30f396634bb19d"
62786270

6271+
is-wsl@^1.1.0:
6272+
version "1.1.0"
6273+
resolved "https://registry.yarnpkg.com/is-wsl/-/is-wsl-1.1.0.tgz#1f16e4aa22b04d1336b66188a66af3c600c3a66d"
6274+
integrity sha512-gfygJYZ2gLTDlmbWMI0CE2MwnFzSN/2SZfkMlItC4K/JBlsWVDB0bO6XhqcY13YXE7iMcAJnzTCJjPiTeJJ0Mw==
6275+
62796276
is-wsl@^2.2.0:
62806277
version "2.2.0"
62816278
resolved "https://registry.yarnpkg.com/is-wsl/-/is-wsl-2.2.0.tgz#74a4c76e77ca9fd3f932f290c17ea326cd157271"
@@ -7903,9 +7900,12 @@ onetime@^5.1.2:
79037900
dependencies:
79047901
mimic-fn "^2.1.0"
79057902

7906-
open@0.0.5:
7907-
version "0.0.5"
7908-
resolved "https://registry.yarnpkg.com/open/-/open-0.0.5.tgz#42c3e18ec95466b6bf0dc42f3a2945c3f0cad8fc"
7903+
open@0.0.5, open@^6.0.0:
7904+
version "6.4.0"
7905+
resolved "https://registry.yarnpkg.com/open/-/open-6.4.0.tgz#5c13e96d0dc894686164f18965ecfe889ecfc8a9"
7906+
integrity sha512-IFenVPgF70fSm1keSd2iDBIDIBZkroLeuffXq+wKTzTJlBpesFWojV9lb8mzOfaAzM1sr7HQHuO0vtV0zYekGg==
7907+
dependencies:
7908+
is-wsl "^1.1.0"
79097909

79107910
opencollective-postinstall@^2.0.2:
79117911
version "2.0.3"
@@ -8508,10 +8508,6 @@ prepend-http@^1.0.0:
85088508
version "1.0.4"
85098509
resolved "https://registry.yarnpkg.com/prepend-http/-/prepend-http-1.0.4.tgz#d4f4562b0ce3696e41ac52d0e002e57a635dc6dc"
85108510

8511-
preserve@^0.2.0:
8512-
version "0.2.0"
8513-
resolved "https://registry.yarnpkg.com/preserve/-/preserve-0.2.0.tgz#815ed1f6ebc65926f865b310c0713bcb3315ce4b"
8514-
85158511
prettier-linter-helpers@^1.0.0:
85168512
version "1.0.0"
85178513
resolved "https://registry.yarnpkg.com/prettier-linter-helpers/-/prettier-linter-helpers-1.0.0.tgz#d23d41fe1375646de2d0104d3454a3008802cf7b"

0 commit comments

Comments
 (0)