diff options
| author | Leitwolf11 | 2026-10-10 20:42:12 +0300 |
|---|---|---|
| committer | Leitwolf11 | 2026-10-10 20:42:12 +0300 |
| commit | 8030487f15191f749948725fd185fb02104a2492 (patch) | |
| tree | 395e28de46bfa08aea53dab53a38f1b9a943b8a5 | |
| parent | bd009a31cbc06ccecbb870e60cf5d7868a3c8722 (diff) | |
| download | website-8030487f15191f749948725fd185fb02104a2492.tar.gz | |
Update source-map-js past GHSA-68fv-2mgg-jv7q
The frontend job runs `npm audit --audit-level=moderate`, and an
advisory published for source-map-js 1.0.0 to 1.2.1 (denial of service
through indexed source-map section offsets, high severity) now fails
it on every branch. The package is a transitive dependency of the Vue
compiler. The lockfile moves it from 1.2.1 to 1.2.2, as `npm audit fix`
does; nothing else in the lockfile changes.
| -rw-r--r-- | frontend/package-lock.json | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/frontend/package-lock.json b/frontend/package-lock.json index 1daff07..7109f7e 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -1891,9 +1891,9 @@ } }, "node_modules/source-map-js": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", - "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz", + "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==", "license": "BSD-3-Clause", "engines": { "node": ">=0.10.0" |