Skip to content

Commit 959c7f2

Browse files
authored
security: bump protobufjs to 7.5.6 (#6)
Addresses high-severity code injection + DoS via unbounded recursion in protobufjs <7.5.6. Adds an "overrides" entry for protobufjs and refreshes the lockfile entry.
1 parent ff34ee3 commit 959c7f2

2 files changed

Lines changed: 6 additions & 3 deletions

File tree

‎package-lock.json‎

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎package.json‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,5 +75,8 @@
7575
},
7676
"lint-staged": {
7777
"*.{ts,tsx,js,jsx,mjs,cjs,json,md,yml,yaml}": "biome check --write --no-errors-on-unmatched"
78+
},
79+
"overrides": {
80+
"protobufjs": ">=7.5.6"
7881
}
7982
}

0 commit comments

Comments
 (0)