Skip to content

Commit c1dd58b

Browse files
committed
Fix high severity rollup vulnerability (GHSA-mw96-cpmx-2vgc)
Add rollup override to force >=4.59.0 for all transitive dependencies, resolving the arbitrary file write via path traversal vulnerability.
1 parent cb406b8 commit c1dd58b

2 files changed

Lines changed: 34 additions & 24 deletions

File tree

bun.lock

Lines changed: 31 additions & 23 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,6 +69,7 @@
6969
"@atomic-ehr/fhirschema": "^0.0.8",
7070
"mustache": "^4.2.0",
7171
"picocolors": "^1.1.1",
72+
"rollup": "^4.59.0",
7273
"tinyglobby": "^0.2.15",
7374
"yaml": "^2.8.2",
7475
"yargs": "^18.0.0"
@@ -84,6 +85,7 @@
8485
"typescript": "^5.9.3"
8586
},
8687
"overrides": {
87-
"minimatch": ">=10.2.1"
88+
"minimatch": ">=10.2.1",
89+
"rollup": ">=4.59.0"
8890
}
8991
}

0 commit comments

Comments
 (0)