DanielXMoore / Civet / 23919763873

95%

push

github

fix: add pnpm overrides for lodash, esbuild, diff security vulnerabilities (#1897)

* fix: add pnpm overrides for lodash, esbuild, diff security vulnerabilities

- lodash >=4.0.0 <=4.17.23: Code Injection (GHSA-r5fr-rjxr-66jc) and
  Prototype Pollution (GHSA-f23m-r3pf-42rh) — transitive via
  farm integration > @farmfe/cli > inquirer > lodash
- esbuild <=0.24.2: CORS bypass in dev server (GHSA-67mh-4wv8-2f99) —
  transitive via vitepress > vite@5 > esbuild
- diff >=6.0.0 <8.0.3: DoS in parsePatch/applyPatch (GHSA-73rr-hh4g-fpgx) —
  transitive via gulp integration > mocha@11 > diff

pnpm audit now reports 0 vulnerabilities.

---------

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Daniel X Moore <STRd6@users.noreply.github.com>
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

5916 of 6285 branches covered (94.13%)

Branch coverage included in aggregate %.

24991 of 26970 relevant lines covered (92.66%)

36762.25 hits per line