diegosouzapw 92a3a421ee fix(security): pin uuid >= 11.1.1 via overrides to clear moderate audit ...

Adds an `uuid` overrides entry so the transitive uuid dependency pulled in
by proxifly → itwcw-package-analytics → uuid (vulnerable to the missing
buffer-bounds check, GHSA-w5hq-g745-h8pq) is resolved to a patched build.

Symptom: `npm run audit:deps` (Lint job) reported 4 moderate vulnerabilities
on release/v3.8.4 because proxifly was newly added in this release.

The override uses ^14.0.0 to match the direct dependency declared in
package.json — the patched uuid 11.1.1+ surfaces under the v14 line via
the latest releases (v14.0.x continues to address the GHSA).

2026-05-26 06:21:03 -03:00

11 KiB

Raw Blame History

View Raw