Skip to content

Fix vulnerable npm dependencies (npm audit fix) - #168

Merged
aneshlya merged 1 commit into
mainfrom
automation/npm-audit-fix
Oct 7, 2026
Merged

aneshlya merged 1 commit into
mainfrom
automation/npm-audit-fix

Conversation

@aneshlya

@aneshlya aneshlya commented Oct 7, 2026

Copy link
Copy Markdown
Collaborator

Automated npm audit fix for vulnerable dependencies that Dependabot did not update.

Fixed

  • qs (moderate): qs array-limit bypass via bracket-key comma parsing; qs: Denial of Service via Attacker Controlled isBuffer

Still vulnerable (needs a major bump or overrides)

None

Changes

 client-vscode/package-lock.json | 22 ++++------------------
 1 file changed, 4 insertions(+), 18 deletions(-)

@aneshlya aneshlya added dependencies Pull requests that update a dependency file security labels Oct 7, 2026
@aneshlya
aneshlya merged commit 7215704 into main Oct 7, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant