gsadmin/sencho
1
0
Fork 0
mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-08-26 02:06:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: pin postcss override to clear backend audit vulnerability (#1701)

Browse Source 
vitest pulls in vite, which pulls in postcss@8.5.15, flagged high
severity for a source-map path traversal advisory. Pin postcss via
npm overrides (same pattern already used for brace-expansion) so the
fix is scoped to the vulnerable transitive dependency instead of
letting a broad npm audit fix churn unrelated packages.
This commit is contained in:
Anso
2026-07-24 15:21:22 -04:00
committed by GitHub
parent 79914fe750
commit e33eda3c38
2 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/package.json
+2 -1
View File
@@ -30,7 +30,8 @@
"node": ">=26.0.0"
},
"overrides": {
"brace-expansion": "^5.0.7"
"brace-expansion": "^5.0.7",
"postcss": "^8.5.23"
},
"devDependencies": {
"@eslint/js": "^10.0.1",