Releases/v3 feb2026 - #518

Closed

kumaraksh1 wants to merge 63 commits into

releases/v3from

releases/v3-feb2026

GitHub Advanced Security / CodeQL succeeded Feb 20, 2026 in 1s

4 new alerts including 4 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

4 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 42487 in dist/index.js

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.
This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.
This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.

Check warning on line 42494 in dist/index.js

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.
This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.
This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.

Check warning on line 42496 in dist/index.js

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.
This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.
This assignment may alter Object.prototype if a malicious '__proto__' string is injected from

.

Check warning on line 103787 in dist/index.js

Code scanning / CodeQL

Overly permissive regular expression range Medium

Suspicious character range that is equivalent to [0-9:].