headlamp-rook-plugin

privilegedescalation/headlamp-rook-plugin

Archived

You've already forked headlamp-rook-plugin

Code Issues 8 Pull Requests 1 Actions Packages Projects Releases 14 Wiki Activity

Compare commits

merge into: privilegedescalation/headlamp-rook-plugin:fix-lodash

pull from: privilegedescalation/headlamp-rook-plugin:pr-38

Branches Tags

3 Commits

fix-lodash .. pr-38

Author	SHA1	Message	Date
Chris Farhood	62bab0ffc3	Regenerate lockfile for lodash override - Explicitly add lodash@4.18.1 to ensure override is respected - Regenerated pnpm-lock.yaml with resolved lodash@4.18.1 (CVE fix) Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-03 22:27:36 +00:00
Chris Farhood	dd730cc4cd	fix: override lodash >=4.18.0 to patch code injection vulnerability Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-03 22:27:30 +00:00
privilegedescalation-engineer[bot]	d44ae043c3	fix: update vite to >=6.4.2 to patch arbitrary file read vulnerability (#37 ) Vite versions >=6.0.0 <=6.4.1 are vulnerable to arbitrary file read via the Vite Dev Server WebSocket (server.fs.deny bypass with queries). CVE: GHSA-p9ff-h696-f583 Co-authored-by: Gandalf the Greybeard <gandalf@privilegedescalation.dev> Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-03 17:44:08 +00:00

Author

SHA1

Message

Date

Chris Farhood

62bab0ffc3

Regenerate lockfile for lodash override

- Explicitly add lodash@4.18.1 to ensure override is respected
- Regenerated pnpm-lock.yaml with resolved lodash@4.18.1 (CVE fix)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-05-03 22:27:36 +00:00

Chris Farhood

dd730cc4cd

fix: override lodash >=4.18.0 to patch code injection vulnerability

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-05-03 22:27:30 +00:00

privilegedescalation-engineer[bot]

d44ae043c3

fix: update vite to >=6.4.2 to patch arbitrary file read vulnerability (#37 )

Vite versions >=6.0.0 <=6.4.1 are vulnerable to arbitrary file read via
the Vite Dev Server WebSocket (server.fs.deny bypass with queries).

CVE: GHSA-p9ff-h696-f583

Co-authored-by: Gandalf the Greybeard <gandalf@privilegedescalation.dev>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-03 17:44:08 +00:00

2 changed files with 1051 additions and 636 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Expand all files Collapse all files

									
										package.json
									
		+1
		
												View File
												
					@@ -47,6 +47,7 @@

					  "overrides": {

					  "overrides": {

					    "tar": "^7.5.11",

					    "tar": "^7.5.11",

					    "undici": "^7.24.3",

					    "undici": "^7.24.3",

					    "vite": ">=6.4.2",

					    "lodash": ">=4.18.0"

					    "lodash": ">=4.18.0"

					  }

					  }

					}

					}

pnpm-lock.yaml

Generated

+1049 -635

View File

File diff suppressed because it is too large Load Diff

Reference in New Issue

Repository

privilegedescalation/headlamp-rook-plugin

Title

Body

Block a user

Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.

User to block:

Optional note:

The note is not visible to the blocked user.

Compare commits

3 Commits fix-lodash .. pr-38

3 Commits

fix-lodash .. pr-38