WIP: fix(deps): uuid override ^11.0.0 — GHSA-w5hq-g745-h8pq #86

Closed

defenseur-auto-bot wants to merge 2 commits from defenseur-auto/d8fb641059-1777737632446 into master

defenseur-auto-bot commented

2026-05-02 16:13:29 +00:00

Collaborator

Vuln GHSA-w5hq-g745-h8pq detectee (uuid <10.0.0).
Fix: override uuid ^11.0.0 (CJS stable, uuid@11.1.1 installe).
Rationale: uuid@10 est ESM-only (require() echoue) ; uuid@11 est la version CJS minimale qui satisfait la GHSA. Le bump ^14.0.0 du premier essai etait inutile — ^11.0.0 pre-existant est la correction correcte.
Tests: npm test pass — 6/6 checks (v3/v5 buffer arg, sites vuln).
Source: defenseur-simpl-liste 2026-05-02.

Closes #<ISSUE_NUMBER>

Closes #85

Vuln GHSA-w5hq-g745-h8pq detectee (uuid <10.0.0). Fix: override uuid ^11.0.0 (CJS stable, uuid@11.1.1 installe). Rationale: uuid@10 est ESM-only (require() echoue) ; uuid@11 est la version CJS minimale qui satisfait la GHSA. Le bump ^14.0.0 du premier essai etait inutile — ^11.0.0 pre-existant est la correction correcte. Tests: npm test pass — 6/6 checks (v3/v5 buffer arg, sites vuln). Source: defenseur-simpl-liste 2026-05-02. Closes #<ISSUE_NUMBER> Closes #85

defenseur-auto-bot added 2 commits 2026-05-02 16:13:30 +00:00

fix(deps): override uuid ^14.0.0 (GHSA-w5hq-g745-h8pq) c6f86c5a55

fix(deps): revert uuid override to ^11.0.0 — CJS compat, fixes GHSA-w5hq-g745-h8pq 800f7771ff

maximus changed title from ~~fix(deps): uuid override ^11.0.0 — GHSA-w5hq-g745-h8pq~~ to WIP: fix(deps): uuid override ^11.0.0 — GHSA-w5hq-g745-h8pq

2026-05-02 16:14:44 +00:00

maximus changed title from ~~WIP: fix(deps): uuid override ^11.0.0 — GHSA-w5hq-g745-h8pq~~ to fix(deps): uuid override ^11.0.0 — GHSA-w5hq-g745-h8pq

2026-05-02 16:14:44 +00:00

maximus changed title from ~~fix(deps): uuid override ^11.0.0 — GHSA-w5hq-g745-h8pq~~ to WIP: fix(deps): uuid override ^11.0.0 — GHSA-w5hq-g745-h8pq

2026-05-02 16:15:10 +00:00

maximus closed this pull request

2026-05-02 19:00:27 +00:00