maximus
deleted branch issue-103-babel-brace-overrides from maximus/simpl-liste
2026-08-12 18:14:20 +00:00
fix(security): resolve brace-expansion + @babel/core via version-scoped overrides
[security] deps: vulnerability in brace-expansion (high)
[security] deps: vulnerability in @babel/core (low)
fix(security): resolve brace-expansion + @babel/core via version-scoped overrides
Review — APPROVE
Override de sécurité propre et ciblé : 2 fichiers touchés (package.json + package-lock.json), diff lock strictement symétrique (102/102 lignes, 22 bumps de version,…
fix(security): resolve brace-expansion + @babel/core via version-scoped overrides
maximus
created branch issue-103-babel-brace-overrides in maximus/simpl-liste
2026-08-12 18:06:52 +00:00
[security] deps: vulnerability in brace-expansion (high)
Rouverte -- debloquee par la technique version-scoped
Le verdict initial (non fixable in-place) tenait pour un override blanket brace-expansion: ^5.0.8 (qui force 5.x sur minimatch@3/@9…
[security] deps: vulnerability in @babel/core (low)
[security] deps: image-size DoS (high) -- bloque upstream, suivi
Re-verifie (passe "tout corriger")
Toujours bloque upstream. La derniere version publiee d'image-size reste 2.0.2, elle-meme dans le range vulnerable (<=2.0.2) ; aucune 2.0.3 ni…
[security] deps: vulnerability in brace-expansion (high)
fix(security): bump undici + js-yaml overrides to patched versions
[security] deps: vulnerability in undici (moderate)
[security] deps: vulnerability in js-yaml (high)
maximus
deleted branch issue-106-107-deps-overrides from maximus/simpl-liste
2026-08-12 01:41:31 +00:00