Skip to content

Commit 79a8448

Browse files
mvvmmmvvmm
committed
Bump nanoid to 3.3.18 for GHSA-2v37-7h3g-55p8 
1 parent b8a6b7e commit 79a8448

3 files changed

Lines changed: 14 additions & 12 deletions

File tree

‎.changeset/nanoid-3.3.18.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
"@cloudflare/nimbus-docs": patch
3+
---
4+
5+
Bump `nanoid` to 3.3.18 to resolve GHSA-2v37-7h3g-55p8 (CVE-2026-67213): custom generators can loop indefinitely when size is zero.

‎pnpm-lock.yaml‎

Lines changed: 5 additions & 12 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pnpm-workspace.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,3 +10,7 @@ packages:
1010
# framework's lockfile. Excluding them here keeps `pnpm install` from
1111
# injecting their importers into pnpm-lock.yaml.
1212
- "!examples/local"
13+
14+
# nanoid@3.3.18 patches GHSA-2v37-7h3g-55p8; postcss ^3.3.17 won't resolve to it
15+
overrides:
16+
nanoid: 3.3.18

0 commit comments

Comments
 (0)