Skip to content

Commit dade20d

Browse files
authored
fix(#2385): fixing security findings in frontend (#2386)
CVEs fixed:\n- CVE-2026-69153 (postcss)\n- GHSA-r28c-9q8g-f849 (postcss)\n- GHSA-c2j3-45gr-mqc4 (dompurify)\n\nCloses #2385
1 parent fc1e068 commit dade20d

2 files changed

Lines changed: 121 additions & 64 deletions

File tree

frontend/package-lock.json

Lines changed: 119 additions & 62 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

frontend/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,7 @@
119119
},
120120
"overrides": {
121121
"@babel/core": "^8.0.0",
122-
"dompurify": "^3.4.11",
122+
"dompurify": "3.4.12",
123123
"uuid": "^14.0.0",
124124
"picomatch@^4.0.0": "^4.0.4",
125125
"flatted": "^3.4.2",
@@ -132,7 +132,7 @@
132132
"lodash@^4.0.0": "^4.18.1",
133133
"qs": "6.15.3",
134134
"follow-redirects": "^1.16.0",
135-
"postcss": "^8.5.10",
135+
"postcss": "8.5.23",
136136
"tmp": "^0.2.6",
137137
"js-yaml": "5.2.2",
138138
"fast-uri": "4.1.2",

0 commit comments

Comments
 (0)