privilegedescalation/headlamp-rook-plugin

fix: add elliptic override for GHSA-848j-6mx2-7j84 #62

Closed

privilegedescalation-engineer[bot] wants to merge 1 commits from fix/elliptic-override-ghsa-848j-6mx2-7j84 into main

Author	SHA1	Message	Date
Chris Farhood	013f9260ec	fix: add elliptic override for GHSA-848j-6mx2-7j84 Add pnpm.overrides.elliptic to prevent version regression on the transitive elliptic vulnerability (CVE-2025-14505). Vulnerability path: @kinvolk/headlamp-plugin → vite-plugin-node-polyfills → node-stdlib-browser → crypto-browserify → browserify-sign → elliptic Note: pnpm audit will still report the vulnerability until upstream publishes elliptic 6.6.2+. This override safeguards against pulling a worse version. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-05 18:07:05 +00:00

Author

SHA1

Message

Date

Chris Farhood

013f9260ec

fix: add elliptic override for GHSA-848j-6mx2-7j84

Add pnpm.overrides.elliptic to prevent version regression on
the transitive elliptic vulnerability (CVE-2025-14505).

Vulnerability path:
@kinvolk/headlamp-plugin → vite-plugin-node-polyfills →
node-stdlib-browser → crypto-browserify → browserify-sign → elliptic

Note: pnpm audit will still report the vulnerability until
upstream publishes elliptic 6.6.2+. This override safeguards
against pulling a worse version.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-05-05 18:07:05 +00:00

fix: add elliptic override for GHSA-848j-6mx2-7j84 #62

1 Commits