From 2673a055dfc7d99e4969c2317d4152d3d91e1ce1 Mon Sep 17 00:00:00 2001 From: sean wibisono Date: Mon, 12 Oct 2026 10:39:25 +1100 Subject: [PATCH] UID2-8068: preventive upgrade js-yaml to 3.15.2 / 4.3.2 (CVE-2026-84375) Co-Authored-By: Claude Sonnet 5.5 --- package-lock.json | 14 ++++++-------- package.json | 4 ++-- 2 files changed, 8 insertions(+), 10 deletions(-) diff --git a/package-lock.json b/package-lock.json index 5aa900a3b..fc6dfd9d4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9310,10 +9310,9 @@ } }, "node_modules/gray-matter/node_modules/js-yaml": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", - "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", - "license": "MIT", + "version": "3.15.2", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.2.tgz", + "integrity": "sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==", "dependencies": { "argparse": "^1.0.7", "esprima": "^4.0.0" @@ -10423,9 +10422,9 @@ "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==" }, "node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.2", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz", + "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==", "funding": [ { "type": "github", @@ -10436,7 +10435,6 @@ "url": "https://github.com/sponsors/nodeca" } ], - "license": "MIT", "dependencies": { "argparse": "^2.0.1" }, diff --git a/package.json b/package.json index 8abc9ff72..f38c1f17f 100644 --- a/package.json +++ b/package.json @@ -52,8 +52,8 @@ "overrides": { "brace-expansion@5": "5.0.12", "postcss@8": "8.5.18", - "js-yaml@3": "3.15.0", - "js-yaml@4": "4.3.0", + "js-yaml@3": "3.15.2", + "js-yaml@4": "4.3.2", "shell-quote@1": "1.11.0", "body-parser@1": "1.20.3", "immutable": "^4.3.9",