Skip to content

pnpm audit --fix override - #200

Merged
ted-ross merged 1 commit into
skupperproject:mainfrom
ted-ross:tross-audit
Sep 3, 2026
Merged

ted-ross merged 1 commit into
skupperproject:mainfrom
ted-ross:tross-audit

Conversation

@ted-ross

@ted-ross ted-ross commented Sep 3, 2026

Copy link
Copy Markdown
Member

high
Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

high
Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)

moderate
qs: array-limit bypass via bracket-key comma parsing

moderate
qs: Denial of Service via Attacker Controlled isBuffer

@ted-ross
ted-ross merged commit aada34e into skupperproject:main Sep 3, 2026
2 checks passed
@ted-ross
ted-ross deleted the tross-audit branch September 3, 2026 14:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants