Skip to content

Commit 783236c

Browse files
authored
Merge pull request #2177 from rocketstack-matt/fix/rollup-v2-vulnerability
fix(deps): override rollup 2.x to 2.80.0 to resolve CVE-2026-27606
2 parents bb9e66f + b7393c9 commit 783236c

File tree

2 files changed

+5
-18
lines changed

2 files changed

+5
-18
lines changed

package-lock.json

Lines changed: 1 addition & 17 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,10 @@
6464
"node-forge": "^1.3.2",
6565
"qs": "^6.15.0",
6666
"lodash": "^4.17.23",
67-
"lodash-es": "^4.17.23"
67+
"lodash-es": "^4.17.23",
68+
"@stoplight/spectral-ruleset-bundler@1.6.x": {
69+
"rollup": "2.80.0"
70+
}
6871
},
6972
"dependencies": {
7073
"@finos/calm-shared": "^0.2.2",

0 commit comments

Comments
 (0)