state: sync after #81
This commit is contained in:
parent
1d7388f9ff
commit
297acac768
1 changed files with 4 additions and 4 deletions
8
STATE.md
8
STATE.md
|
|
@ -1,5 +1,7 @@
|
|||
# STATE — simpl-liste
|
||||
|
||||
> Derniere MAJ : 2026-05-08 (par fix-issue #81)
|
||||
|
||||
## Position actuelle
|
||||
|
||||
Version 1.6.1 (versionCode 13). Remediation vulnerabilites du defenseur en cours
|
||||
|
|
@ -9,13 +11,11 @@ non-exploitable en pratique (details dans `SECURITY.md`).
|
|||
|
||||
## Decisions recentes
|
||||
|
||||
- 2026-05-08 : Defenseur rerun confirme 0 findings — overrides existants suffisent, pas de PR necessaire (ref #81)
|
||||
- 2026-04-24 : overrides xmldom + uuid (spec `spec-decisions-vuln-simpl-liste.md`) — PRs #77, #78, #79 (pending-human).
|
||||
- 2026-04-23 : PR #71 merged — fix widget render-optimiste + timing instrumentation.
|
||||
- 2026-04-18 : archive milestone `spec-simpl-liste-web` (12/12 done).
|
||||
|
||||
## Blockers actifs
|
||||
|
||||
- Advisory GHSA-w5hq-g745-h8pq (`uuid <14.0.0`) reste flaggee par npm audit
|
||||
apres override ^11 : non-exploitable (xcode/ngrok utilisent `uuid.v4()`,
|
||||
bug dans v3/v5/v6+buf). Decision Max requise : accepter le residuel ou
|
||||
tenter bump ^14 (risque ESM-only).
|
||||
Aucun.
|
||||
|
|
|
|||
Loading…
Reference in a new issue