Skip to content

fix: update dependencies to resolve security vulnerabilities#1

Open
nashashibi wants to merge 1 commit intomasterfrom
fix/vulnerabilities-1
Open

fix: update dependencies to resolve security vulnerabilities#1
nashashibi wants to merge 1 commit intomasterfrom
fix/vulnerabilities-1

Conversation

@nashashibi
Copy link
Owner

Security Updates

This PR updates several dependencies with known security vulnerabilities to their latest secure versions:

Critical Updates:

  • webpack-dev-server from 2.9.1 to 4.13.3

    • Fixes multiple Remote Code Execution (RCE) vulnerabilities
    • Fixes multiple Cross-site Scripting (XSS) vulnerabilities
  • node-notifier from 5.1.2 to 10.0.1

    • Fixes Command Injection vulnerability
    • Fixes prototype pollution vulnerability
  • webpack-bundle-analyzer from 2.9.0 to 4.8.0

    • Fixes Directory Traversal vulnerability
    • Updates vulnerable dependencies

Other Important Updates:

  • Updated Vue and related packages to latest compatible versions
  • Updated all webpack related packages to v5
  • Updated build tools and loaders to compatible versions
  • Updated Node.js engine requirement to >= 14.0.0

Testing Required:

  • Build process verification
  • Dev server functionality
  • Hot module replacement
  • Production build optimization

Please verify the development and build processes work correctly after these updates.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant