Regenerate lockfile for lodash override

- Explicitly add lodash@4.18.1 to ensure override is respected - Regenerated pnpm-lock.yaml with resolved lodash@4.18.1 (CVE fix) Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: override lodash >=4.18.0 to patch code injection vulnerability
2026-05-03 22:27:36 +00:00 · 2026-05-03 22:27:30 +00:00 · 2026-05-03 17:44:08 +00:00 · 2026-04-15 04:00:27 +00:00
2 changed files with 1065 additions and 645 deletions
@@ -35,6 +35,7 @@
    "@types/react-dom": "^18.0.0",
    "eslint": "^8.57.0",
    "jsdom": "^24.0.0",
+    "lodash": "4.18.1",
    "notistack": "^3.0.0",
    "prettier": "^2.8.8",
    "react": "^18.3.1",
@@ -45,6 +46,8 @@
  },
  "overrides": {
    "tar": "^7.5.11",
-    "undici": "^7.24.3"
+    "undici": "^7.24.3",
+    "vite": ">=6.4.2",
+    "lodash": ">=4.18.0"
  }
-}
+}
Author	SHA1	Message	Date
Chris Farhood	62bab0ffc3	Regenerate lockfile for lodash override - Explicitly add lodash@4.18.1 to ensure override is respected - Regenerated pnpm-lock.yaml with resolved lodash@4.18.1 (CVE fix) Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-03 22:27:36 +00:00
Chris Farhood	dd730cc4cd	fix: override lodash >=4.18.0 to patch code injection vulnerability Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-03 22:27:30 +00:00
privilegedescalation-engineer[bot]	d44ae043c3	fix: update vite to >=6.4.2 to patch arbitrary file read vulnerability (#37 ) Vite versions >=6.0.0 <=6.4.1 are vulnerable to arbitrary file read via the Vite Dev Server WebSocket (server.fs.deny bypass with queries). CVE: GHSA-p9ff-h696-f583 Co-authored-by: Gandalf the Greybeard <gandalf@privilegedescalation.dev> Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-03 17:44:08 +00:00
privilegedescalation-engineer[bot]	39ed3ea90a	release: v1.0.2 (#36 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-04-15 04:00:27 +00:00