From 10c93e5b542833c54590776121c01fc97679e55e Mon Sep 17 00:00:00 2001 From: anupamme Date: Mon, 10 Aug 2026 13:53:23 +0000 Subject: [PATCH] fix: upgrade minimist to 1.2.6, 0.2.4 (CVE-2021-44906) minimist: prototype pollution Resolves CVE-2021-44906 --- package-lock.json | 21 +++++++++++++++++++++ package.json | 3 +++ 2 files changed, 24 insertions(+) diff --git a/package-lock.json b/package-lock.json index 44b68e8383..140eff90cd 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2551,6 +2551,13 @@ "node": ">=v14" } }, + "node_modules/@commitlint/read/node_modules/minimist": { + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==", + "dev": true, + "license": "MIT" + }, "node_modules/@commitlint/resolve-extends": { "version": "17.8.1", "dev": true, @@ -17386,6 +17393,13 @@ "uglify-js": "^3.1.4" } }, + "node_modules/handlebars/node_modules/minimist": { + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==", + "dev": true, + "license": "MIT" + }, "node_modules/har-schema": { "version": "2.0.0", "license": "ISC", @@ -29210,6 +29224,13 @@ "rc": "cli.js" } }, + "node_modules/rc/node_modules/minimist": { + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==", + "dev": true, + "license": "MIT" + }, "node_modules/rc/node_modules/strip-json-comments": { "version": "2.0.1", "dev": true, diff --git a/package.json b/package.json index a8fd5d65ba..ebb5efaf22 100644 --- a/package.json +++ b/package.json @@ -51,5 +51,8 @@ "npm": "10.9.9", "semantic-release": "25.0.9", "ts-node": "10.9.2" + }, + "overrides": { + "minimist": "1.2.6" } }