Skip to content

Commit 1efd530

Browse files
committed
fix: patch ajv and minimatch security vulnerabilities
Override transitive dependencies via pnpm overrides to resolve Dependabot alerts #12 (ajv ReDoS) and #13 (minimatch ReDoS): - ajv 8.17.1 → >=8.18.0 (production, via @modelcontextprotocol/sdk) - minimatch 3.1.2/9.0.5 → >=10.2.1 (dev-only, via eslint/jest)
1 parent 1949803 commit 1efd530

File tree

2 files changed

+34
-48
lines changed

2 files changed

+34
-48
lines changed

package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,9 @@
7373
},
7474
"pnpm": {
7575
"overrides": {
76-
"qs": ">=6.14.2"
76+
"qs": ">=6.14.2",
77+
"ajv@>=8": ">=8.18.0",
78+
"minimatch@<10": ">=10.2.1"
7779
}
7880
},
7981
"dependencies": {

pnpm-lock.yaml

Lines changed: 31 additions & 47 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)