Files
OmniRoute/changelog.d/fixes/sec-adm-zip-codeql-host-match.md

2 lines
247 B
Markdown

- fix(security): bump adm-zip to ^0.6.0 (dev transitive via promptfoo/onnxruntime-node) to clear the crafted-ZIP 4GB-allocation advisory, and tighten mitm DNS test host assertion to exact matching (CodeQL js/incomplete-url-substring-sanitization)