Skip to content

Commit d3400eb

Browse files
committed
fix: revert brace expansion update and mark as ignored. the vulnerability is a redos and would require users to bring an inefficient glob pattern to affect it. not relevant in this repo
1 parent 9027ef0 commit d3400eb

File tree

2 files changed

+25
-15
lines changed

2 files changed

+25
-15
lines changed

package.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -78,8 +78,7 @@
7878
"vite": "$vite",
7979
"@types/node@<=20.12.0": "20.19.0",
8080
"send@<0.19.0": "^0.19.1",
81-
"@sveltejs/kit>cookie@<0.7.0": "^0.7.0",
82-
"brace-expansion@<4.0.1": "^4.0.1"
81+
"@sveltejs/kit>cookie@<0.7.0": "^0.7.0"
8382
},
8483
"onlyBuiltDependencies": [
8584
"esbuild"
@@ -92,7 +91,8 @@
9291
],
9392
"auditConfig": {
9493
"ignoreGhsas": [
95-
"GHSA-67mh-4wv8-2f99"
94+
"GHSA-67mh-4wv8-2f99",
95+
"GHSA-v6h2-p8h4-qcjw"
9696
]
9797
},
9898
"updateConfig": {

pnpm-lock.yaml

Lines changed: 22 additions & 12 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)