Skip to content

Commit a138b5a

Browse files
authored
chore(deps): resolve 6 security warnings (#548)
Before: ``` @nuxt/devtools <2.6.4 Severity: moderate Nuxt DevTools vulnerable to cross-site scripting (XSS) - GHSA-xmq3-q5pm-rp26 fix available via `npm audit fix` node_modules/@nuxt/devtools glob 10.2.0 - 10.4.5 Severity: high glob CLI: Command injection via -c/--cmd executes matches with shell:true - GHSA-5j98-mcp5-4vw2 fix available via `npm audit fix` node_modules/glob js-yaml 4.0.0 - 4.1.0 Severity: moderate js-yaml has prototype pollution in merge (<<) - GHSA-mh29-5h37-fv8m fix available via `npm audit fix` node_modules/js-yaml node-forge <=1.3.1 Severity: high node-forge has ASN.1 Unbounded Recursion - GHSA-554w-wpv2-vw27 node-forge is vulnerable to ASN.1 OID Integer Truncation - GHSA-65ch-62r8-g69g node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization - GHSA-5gfm-wpxj-wjgq fix available via `npm audit fix` node_modules/node-forge playwright <1.55.1 Severity: high Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate - GHSA-7mvr-c777-76hp fix available via `npm audit fix` node_modules/playwright vite 6.0.0 - 6.4.0 || 7.1.0 - 7.1.10 Severity: moderate vite allows server.fs.deny bypass via backslash on Windows - GHSA-93m4-6634-74q7 vite allows server.fs.deny bypass via backslash on Windows - GHSA-93m4-6634-74q7 fix available via `npm audit fix` node_modules/vite packages/vite-plugin/node_modules/vite 6 vulnerabilities (3 moderate, 3 high) ``` After `npm audit fix`: ``` $ npm audit audited 1309 packages in 10s found 0 vulnerabilities ```
1 parent 5225265 commit a138b5a

File tree

1 file changed

+122
-104
lines changed

1 file changed

+122
-104
lines changed

0 commit comments

Comments
 (0)