Skip to content

Commit 4045d97

Browse files
FJ-RiverosFJ-Riveros
committed
fix(deps): widen uuid 11.x override for CVE-2026-41907
Replace uuid@11.1.0 pin with uuid@>=11.0.0 <11.1.1 → 11.1.1. Residual uuid@8 major bump remains deferred.
1 parent c8ba558 commit 4045d97

2 files changed

Lines changed: 4 additions & 12 deletions

File tree

‎pnpm-lock.yaml‎

Lines changed: 3 additions & 11 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pnpm-workspace.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ overrides:
4646
# CVE-2026-13149: no patched 3.x/4.x exists — advisory remediates >=3.0.0 via 5.x
4747

4848
"ip-address@<=10.1.0": "10.1.1"
49-
"uuid@11.1.0": "11.1.1"
49+
"uuid@>=11.0.0 <11.1.1": "11.1.1"
5050
"ws@>=7.0.0 <7.5.11": "7.5.11"
5151
"ws@>=8.0.0 <8.21.0": "8.21.0"
5252
"plain-crypto-js@4.2.1": "0.0.0-security"

0 commit comments

Comments
 (0)