Skip to content

Update dependency @pmmmwh/react-refresh-webpack-plugin to v0.5.8#105

Open
dev-mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/pmmmwh-react-refresh-webpack-plugin-0.x-lockfile
Open

Update dependency @pmmmwh/react-refresh-webpack-plugin to v0.5.8#105
dev-mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/pmmmwh-react-refresh-webpack-plugin-0.x-lockfile

Conversation

@dev-mend-for-github-com
Copy link
Copy Markdown

@dev-mend-for-github-com dev-mend-for-github-com bot commented Oct 28, 2025

This PR contains the following updates:

Package Type Update Change
@pmmmwh/react-refresh-webpack-plugin dependencies patch 0.5.70.5.8

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability Reachability
High High 7.1 CVE-2022-46175
High High 7.1 CVE-2022-46175

Release Notes

pmmmwh/react-refresh-webpack-plugin (@​pmmmwh/react-refresh-webpack-plugin)

v0.5.8

Compare Source

Fixes
  • Fixed performance issue regarding require.resolve in loader injection
    (#​669)

  • Bumped core-js-pure to not depend on deprecated versions
    (#​674)


  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github-com dev-mend-for-github-com bot added the security fix Security fix generated by Mend label Oct 28, 2025
@dev-mend-for-github-com dev-mend-for-github-com bot force-pushed the whitesource-remediate/pmmmwh-react-refresh-webpack-plugin-0.x-lockfile branch from 2e4580e to eff7a86 Compare November 18, 2025 11:02
@dev-mend-for-github-com dev-mend-for-github-com bot force-pushed the whitesource-remediate/pmmmwh-react-refresh-webpack-plugin-0.x-lockfile branch from eff7a86 to eeeb547 Compare January 21, 2026 18:52
@dev-mend-for-github-com dev-mend-for-github-com bot force-pushed the whitesource-remediate/pmmmwh-react-refresh-webpack-plugin-0.x-lockfile branch from eeeb547 to 22cc984 Compare February 14, 2026 16:11
@dev-mend-for-github-com dev-mend-for-github-com bot force-pushed the whitesource-remediate/pmmmwh-react-refresh-webpack-plugin-0.x-lockfile branch from 22cc984 to 763823c Compare March 16, 2026 23:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants