hacker07/NeoTachyon
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix: upgrade postcss 8.5.20 → 8.5.23 (GHSA-6g55-p6wh-862q)

Browse Source 
Arbitrary .map file read via untrusted sourceMappingURL when from is
unset. Added npm overrides to force postcss@8.5.23 across all transitive
deps (tsup, vitest→vite).
This commit is contained in:
Dushnilin
2026-08-04 09:12:20 +03:00
parent 56480443b4
commit ea40ce1e93
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fe-app-tachyon/package-lock.json
Generated
+3 -3
View File
@@ -3725,9 +3725,9 @@
} }
}, },
"node_modules/postcss": { "node_modules/postcss": {
"version": "8.5.20", "version": "8.5.23",
"resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.20.tgz", "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.23.tgz",
"integrity": "sha512-lW616l85ucIQL+FocMmL7pQFPqBmwejrCMg+iPxyImlrANNJG9NHq/RkyCZopDhd8C3LA03PHRJDjkbGu8vvug==", "integrity": "sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==",
"dev": true, "dev": true,
"funding": [ "funding": [
{ {
fe-app-tachyon/package.json
+3
View File
@@ -35,5 +35,8 @@
"typescript": "5.9.3", "typescript": "5.9.3",
"typescript-eslint": "8.45.0", "typescript-eslint": "8.45.0",
"vitest": "^4.1.10" "vitest": "^4.1.10"
},
"overrides": {
"postcss": "8.5.23"
} }
} }