2026-09-19T18:28:46Z - 2026-10-19T18:28:46Z
Overview
6 pull requests merged by 1 user
Merged
#138 fix(security): raise shell-quote, add compression and source-map-js floors
Merged
#132 state: sync after #128, #129 (PR #131), #126 and #130
Merged
#131 fix(security): add http-cache-semantics and postcss-selector-parser floors
Merged
#127 fix(security): raise brace-expansion and undici override floors
Merged
#122 fix(security): raise @xmldom/xmldom and js-yaml override floors
Merged
#119 fix(security): bump @react-navigation/core to 7.22.1 via override
11 issues closed from 2 users
Closed
#133 [security] deps: vulnerability in shell-quote (critical)
Closed
#134 [security] deps: vulnerability in compression (high)
Closed
#135 [security] deps: vulnerability in source-map-js (high)
Closed
#128 [security] deps: vulnerability in http-cache-semantics (high)
Closed
#129 [security] deps: vulnerability in postcss-selector-parser (low)
Closed
#126 [security] deps: decode-uri-component 0.5.0 publiee, re-tester l'acceptation de #120 (moderate)
Closed
#124 [security] deps: vulnerability in brace-expansion (high)
Closed
#125 [security] deps: vulnerability in undici (high)
Closed
#120 [Sécurité] decode-uri-component <=0.4.2 via expo-router -> query-string@7 (inatteignable, risque accepté)
Closed
#121 [security] deps: @xmldom/xmldom 0.8.15 + js-yaml 3.15.2/4.3.2 (high)
Closed
#117 [Sécurité] Vuln modérée dans @react-navigation/core
4 issues created by 1 user
Opened
#123 [security] deps: node-forge RSA PKCS#1 v1.5 (high) -- bloque upstream, suivi
Opened
#130 [security] deps: vulnerability in braces (high) -- plancher, suivi
Opened
#136 [security] deps: vulnerability in postcss-selector-parser GHSA-rj75 (moderate) -- plancher, suivi
Opened
#137 [security] deps: vulnerability in sprintf-js (moderate) -- plancher, suivi