Bugzilla – Attachment 194335 Details for
Bug 41587
node audit identified several vulnerable node dependencies
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 41587: Fix critical and high severity node dependency vulnerabilities
a9628fc.patch (text/plain), 1.49 KB, created by
Kyle M Hall (khall)
on 2026-03-02 12:29:52 UTC
(
hide
)
Description:
Bug 41587: Fix critical and high severity node dependency vulnerabilities
Filename:
MIME Type:
Creator:
Kyle M Hall (khall)
Created:
2026-03-02 12:29:52 UTC
Size:
1.49 KB
patch
obsolete
>From a9628fca6a99c39129f136b16145674df35db7d2 Mon Sep 17 00:00:00 2001 >From: Paul Derscheid <paul.derscheid@lmscloud.de> >Date: Fri, 9 Jan 2026 17:08:11 +0100 >Subject: [PATCH] Bug 41587: Fix critical and high severity node dependency > vulnerabilities > >- Upgrade gulp-exec to ^5.0.0 (fixes lodash.template HIGH) >- Add resolution for form-data ^2.5.4 (CRITICAL) >- Add resolution for braces ^3.0.3 (HIGH) >- Add resolution for qs ^6.14.1 (HIGH) > >Test plan: >- yarn audit --level high should show 0 vulnerabilities >- yarn build && yarn build:prod should complete without errors >- yarn cypress run should return without (or currently expected) errors > >@RM: You will need to push yarn.lock as well > >Signed-off-by: David Nind <david@davidnind.com> > >Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com> >--- > package.json | 7 +++++-- > 1 file changed, 5 insertions(+), 2 deletions(-) > >diff --git a/package.json b/package.json >index bafd7165eb1..893d57d5d39 100644 >--- a/package.json >+++ b/package.json >@@ -26,7 +26,7 @@ > "gulp": "^4.0.2", > "gulp-autoprefixer": "^4.0.0", > "gulp-concat-po": "^1.0.0", >- "gulp-exec": "^4.0.0", >+ "gulp-exec": "^5.0.0", > "gulp-rename": "^2.0.0", > "gulp-rtlcss": "^1.4.1", > "gulp-sass": "^5.1.0", >@@ -69,7 +69,10 @@ > }, > "resolutions": { > "minimatch": "^3.0.2", >- "lodash": "^4.17.12" >+ "lodash": "^4.17.12", >+ "form-data": "^2.5.4", >+ "braces": "^3.0.3", >+ "qs": "^6.14.1" > }, > "author": "", > "license": "GPL-3.0", >-- >2.50.1 (Apple Git-155) >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 41587
:
191211
|
191212
|
191213
|
191215
|
191227
|
191228
|
194284
| 194335 |
194336
|
194337