Commit a138b5a
authored
chore(deps): resolve 6 security warnings (#548)
Before:
```
@nuxt/devtools <2.6.4
Severity: moderate
Nuxt DevTools vulnerable to cross-site scripting (XSS) - GHSA-xmq3-q5pm-rp26
fix available via `npm audit fix`
node_modules/@nuxt/devtools
glob 10.2.0 - 10.4.5
Severity: high
glob CLI: Command injection via -c/--cmd executes matches with shell:true - GHSA-5j98-mcp5-4vw2
fix available via `npm audit fix`
node_modules/glob
js-yaml 4.0.0 - 4.1.0
Severity: moderate
js-yaml has prototype pollution in merge (<<) - GHSA-mh29-5h37-fv8m
fix available via `npm audit fix`
node_modules/js-yaml
node-forge <=1.3.1
Severity: high
node-forge has ASN.1 Unbounded Recursion - GHSA-554w-wpv2-vw27
node-forge is vulnerable to ASN.1 OID Integer Truncation - GHSA-65ch-62r8-g69g
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization - GHSA-5gfm-wpxj-wjgq
fix available via `npm audit fix`
node_modules/node-forge
playwright <1.55.1
Severity: high
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate - GHSA-7mvr-c777-76hp
fix available via `npm audit fix`
node_modules/playwright
vite 6.0.0 - 6.4.0 || 7.1.0 - 7.1.10
Severity: moderate
vite allows server.fs.deny bypass via backslash on Windows - GHSA-93m4-6634-74q7
vite allows server.fs.deny bypass via backslash on Windows - GHSA-93m4-6634-74q7
fix available via `npm audit fix`
node_modules/vite
packages/vite-plugin/node_modules/vite
6 vulnerabilities (3 moderate, 3 high)
```
After `npm audit fix`:
```
$ npm audit
audited 1309 packages in 10s
found 0 vulnerabilities
```1 parent 5225265 commit a138b5a
1 file changed
+122
-104
lines changed
0 commit comments