Skip to content

Commit e2e1220

Browse files
radwoskipi
authored andcommitted
fix(front): update vulnerable npm packages (#455)
## 📝 Description - Update billboard.js from 3.9.3 to 3.16.0 to fix CVE-2025-49223 (critical prototype pollution vulnerability) - Update d3-color from 1.4.1 to 3.1.0 to fix GHSA-36jr-mh4h-2g58 (high severity ReDoS vulnerability) ## ✅ Checklist - [x] I have tested this change - [x] ~This change requires documentation update~
1 parent a085c8f commit e2e1220

File tree

2 files changed

+19
-13
lines changed

2 files changed

+19
-13
lines changed

front/assets/package-lock.json

Lines changed: 17 additions & 12 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

front/assets/package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,12 +24,13 @@
2424
"@trevoreyre/autocomplete": "^2.1.1",
2525
"@types/markdown-it": "^14.1.2",
2626
"ajv": "^8.17.1",
27-
"billboard.js": "^3.9.3",
27+
"billboard.js": "^3.16.0",
2828
"brace": "^0.11.1",
2929
"codemirror": "^5.64.0",
3030
"cron-parser": "^2.16.3",
3131
"cronstrue": "^1.100.0",
3232
"d3": "^7.4.4",
33+
"d3-color": "^3.1.0",
3334
"d3-time-format": "^2.1.3",
3435
"dagre-d3": "github:dagrejs/dagre-d3#v0.6.4",
3536
"dedent": "1.5.3",

0 commit comments

Comments
 (0)