Skip to content

Commit 138e8ba

Browse files
committed
fix: resolve @babel/runtime security vulnerability
Add yarn resolution to force @babel/runtime ^7.26.10 to fix RegExp complexity vulnerability in transitive dependency from history.
1 parent 16f8dcf commit 138e8ba

3 files changed

Lines changed: 5 additions & 15 deletions

File tree

package-lock.json

Lines changed: 0 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,5 +77,8 @@
7777
},
7878
"browserslist": [
7979
"defaults"
80-
]
80+
],
81+
"resolutions": {
82+
"@babel/runtime": "^7.26.10"
83+
}
8184
}

yarn.lock

Lines changed: 1 addition & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1070,18 +1070,11 @@
10701070
"@babel/plugin-transform-react-jsx-development" "^7.25.9"
10711071
"@babel/plugin-transform-react-pure-annotations" "^7.25.9"
10721072

1073-
"@babel/runtime@^7.12.5":
1073+
"@babel/runtime@^7.12.5", "@babel/runtime@^7.26.10", "@babel/runtime@^7.7.6":
10741074
version "7.28.4"
10751075
resolved "https://registry.yarnpkg.com/@babel/runtime/-/runtime-7.28.4.tgz#a70226016fabe25c5783b2f22d3e1c9bc5ca3326"
10761076
integrity sha512-Q/N6JNWvIvPnLDvjlE1OUBLPQHH6l3CltCEsHIujp45zQUSSh8K+gHnaEX45yAT1nyngnINhvWtzN+Nb9D8RAQ==
10771077

1078-
"@babel/runtime@^7.7.6":
1079-
version "7.26.7"
1080-
resolved "https://registry.yarnpkg.com/@babel/runtime/-/runtime-7.26.7.tgz#f4e7fe527cd710f8dc0618610b61b4b060c3c341"
1081-
integrity sha512-AOPI3D+a8dXnja+iwsUqGRjr1BbZIe771sXdapOtYI531gSqpi92vXivKcq2asu/DFpdl1ceFAKZyRzK2PCVcQ==
1082-
dependencies:
1083-
regenerator-runtime "^0.14.0"
1084-
10851078
"@babel/template@^7.25.9":
10861079
version "7.25.9"
10871080
resolved "https://registry.yarnpkg.com/@babel/template/-/template-7.25.9.tgz#ecb62d81a8a6f5dc5fe8abfc3901fc52ddf15016"
@@ -6338,11 +6331,6 @@ regenerate@^1.4.2:
63386331
resolved "https://registry.yarnpkg.com/regenerate/-/regenerate-1.4.2.tgz#b9346d8827e8f5a32f7ba29637d398b69014848a"
63396332
integrity sha512-zrceR/XhGYU/d/opr2EKO7aRHUeiBI8qjtfHqADTwZd6Szfy16la6kqD0MIUs5z5hx6AaKa+PixpPrR289+I0A==
63406333

6341-
regenerator-runtime@^0.14.0:
6342-
version "0.14.1"
6343-
resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.14.1.tgz#356ade10263f685dda125100cd862c1db895327f"
6344-
integrity sha512-dYnhHh0nJoMfnkZs6GmmhFknAGRrLznOu5nc9ML+EJxGvrx6H7teuevqVqCuPcPK//3eDrrjQhehXVx9cnkGdw==
6345-
63466334
regexp.prototype.flags@^1.5.3, regexp.prototype.flags@^1.5.4:
63476335
version "1.5.4"
63486336
resolved "https://registry.yarnpkg.com/regexp.prototype.flags/-/regexp.prototype.flags-1.5.4.tgz#1ad6c62d44a259007e55b3970e00f746efbcaa19"

0 commit comments

Comments
 (0)