summaryrefslogtreecommitdiff
path: root/package.json
diff options
context:
space:
mode:
authorPawel Zelawski <pawel.zelawski@outlook.com>2026-03-01 13:29:50 +0100
committerPawel Zelawski <pawel.zelawski@outlook.com>2026-03-01 13:29:50 +0100
commit49f83b48196fbc260979f4a808328a34992b12c5 (patch)
tree7ac32e8422a5df4b967e84578df7aee50e135169 /package.json
parentaee3b086b739c7256c33a8a8ddcf50fa96188cd0 (diff)
fix: resolve Rollup path traversal vulnerability (CVE)HEADmain
- Upgrade rollup from 4.40.0 to 4.59.0 via npm override - Fix Rollup arbitrary file write vulnerability via path traversal - Upgrade minimatch to 10.2.3 to fix ReDoS vulnerabilities - All security vulnerabilities resolved (0 vulnerabilities) - Tests and build verified working
Diffstat (limited to 'package.json')
-rw-r--r--package.json8
1 files changed, 5 insertions, 3 deletions
diff --git a/package.json b/package.json
index 6522191..83f3f5a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
{
"name": "digiid-ts",
- "version": "2.0.1",
+ "version": "2.0.2",
"description": "A modern TypeScript implementation of the DigiID authentication protocol.",
"main": "dist/digiid-ts.umd.js",
"module": "dist/digiid-ts.es.js",
@@ -76,6 +76,8 @@
},
"overrides": {
"glob": "^10.5.0",
- "brace-expansion": "^2.0.2"
+ "brace-expansion": "^2.0.2",
+ "rollup": "^4.59.0",
+ "minimatch": "^10.2.3"
}
-}
+} \ No newline at end of file