Mirrors/plane
1
0
Fork 0
mirror of https://github.com/makeplane/plane.git synced 2026-08-29 10:08:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

chore: resolve dependabot security alerts (pnpm + pip) (#9549)

Browse Source 
Python (apps/api):
- cryptography 48.0.1 -> 50.0.0 (PKCS#7 Bleichenbacher oracle, high)

npm (pnpm-workspace.yaml catalog/overrides + lockfile):
- react-router 7.15.1 -> 7.18.1, @react-router/dev -> 7.17.0,
  @react-router/node/serve -> 7.18.1 (DoS, open redirect, XSS, constructor injection)
- sharp ^0.34.3 -> ^0.35.3 (libvips CVEs, high)
- fast-uri -> 3.1.5 via override (host confusion, high)
- js-yaml -> 4.3.0 via override (quadratic CPU DoS, high)
- linkify-it -> 5.0.2 via override (mailto validator DoS, high)
- postcss 8.5.15 -> 8.5.25 (source map path traversal, high/medium)
- undici -> 7.29.0 via override (info disclosure, CRLF/cookie injection)
- sanitize-html 2.17.0 -> 2.17.5 (URI scheme validation bypass, medium)
- valibot -> 1.4.2 via override (flatten() throw, medium)
- body-parser -> 1.20.6 via override (limit bypass DoS, low)
This commit is contained in:
sriram veeraghanta
2026-08-05 00:48:59 +05:30
committed by GitHub
parent fa027167f6
commit 31853ab2b8
3 changed files with 457 additions and 338 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
apps/api/requirements/base.txt
View File

@@ -49,7 +49,7 @@ beautifulsoup4==4.12.3
# analytics
posthog==3.5.0
# crypto
cryptography==48.0.1
cryptography==50.0.0
# html validator
lxml==6.1.0
# s3

767
pnpm-lock.yaml generated
View File

File diff suppressed because it is too large Load Diff

26
pnpm-workspace.yaml
View File

@@ -33,9 +33,9 @@ catalog:
"@radix-ui/react-scroll-area": "^1.2.3"
"@react-pdf/renderer": "^4.3.0"
"@react-pdf/types": "^2.9.2"
"@react-router/dev": "7.15.0"
"@react-router/node": "7.15.0"
"@react-router/serve": "7.15.0"
"@react-router/dev": "7.17.0"
"@react-router/node": "7.18.1"
"@react-router/serve": "7.18.1"
"@storybook/addon-designs": "11.1.3"
"@storybook/addon-docs": "10.4.6"
"@storybook/addon-links": "10.4.6"
@@ -138,7 +138,7 @@ catalog:
"oxfmt": "0.35.0"
"oxlint": "1.51.0"
"pdf-parse": "^2.4.5"
"postcss": "8.5.15"
"postcss": "8.5.25"
"postcss-cli": "^11.0.0"
"postcss-nested": "^6.0.1"
"prosemirror-codemark": "^0.4.2"
@@ -155,16 +155,16 @@ catalog:
"react-masonry-component": "^6.3.0"
"react-pdf-html": "^2.1.2"
"react-popper": "^2.3.0"
"react-router": "7.15.1"
"react-router": "7.18.1"
"recharts": "^2.15.1"
"reflect-metadata": "^0.2.2"
"rehype-parse": "^9.0.1"
"rehype-remark": "^10.0.1"
"remark-gfm": "^4.0.1"
"remark-stringify": "^11.0.0"
"sanitize-html": "2.17.0"
"sanitize-html": "2.17.5"
"serve": "14.2.5"
"sharp": "^0.34.3"
"sharp": "^0.35.3"
"smooth-scroll-into-view-if-needed": "^2.0.2"
"storybook": "10.4.6"
"swr": "2.2.4"
@@ -193,7 +193,7 @@ catalog:
overrides:
express: "catalog:"
mdast-util-to-hast: 13.2.1
valibot: 1.2.0
valibot: 1.4.2
glob: 11.1.0
brace-expansion: 5.0.7
nanoid: 3.3.8
@@ -218,18 +218,22 @@ overrides:
serialize-javascript: 7.0.5
"ajv@6": 6.14.0
"ajv@8": 8.18.0
"undici@7": 7.28.0
"undici@7": 7.29.0
flatted: 3.4.2
picomatch: 2.3.2
"yaml@1": 1.10.3
"yaml@2": 2.8.3
path-to-regexp: 0.1.13
defu: 6.1.5
postcss: 8.5.15
postcss: 8.5.25
axios: "catalog:"
follow-redirects: 1.16.0
uuid: "catalog:"
"fast-uri@<3.1.2": ">=3.1.2"
"fast-uri@<3.1.5": "3.1.5"
"js-yaml@4": 4.3.0
linkify-it: 5.0.2
body-parser: 1.20.6
"@react-router/node": 7.18.1
tmp: 0.2.7
form-data: 4.0.6
"ws@8": 8.21.0