Skip to content

Commit 62ac0f2

Browse files
authored
UID2-7059: fix CVE-2026-44728 (@babel), CVE-2026-6321 & CVE-2026-6322 (fast-uri) (#192)
Upgrade @babel/plugin-transform-modules-systemjs to >=7.29.4 and fast-uri to >=3.1.2 via npm overrides to address HIGH severity vulnerabilities.
1 parent 3ba7a8d commit 62ac0f2

11 files changed

Lines changed: 138 additions & 126 deletions

File tree

package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,9 @@
1919
"path-to-regexp@0": "0.1.13",
2020
"node-forge": "^1.4.0",
2121
"picomatch": "^2.3.2",
22-
"flatted": "^3.4.2"
22+
"flatted": "^3.4.2",
23+
"@babel/plugin-transform-modules-systemjs": ">=7.29.4",
24+
"fast-uri": ">=3.1.2"
2325
},
2426
"resolutions": {
2527
"qs": "6.14.1"

web-integrations/google-secure-signals/client-server/package-lock.json

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

web-integrations/google-secure-signals/client-server/package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,9 @@
2525
"flatted": "^3.4.2",
2626
"path-to-regexp@0": "0.1.13",
2727
"node-forge": "^1.4.0",
28-
"picomatch": "^2.3.2"
28+
"picomatch": "^2.3.2",
29+
"@babel/plugin-transform-modules-systemjs": ">=7.29.4",
30+
"fast-uri": ">=3.1.2"
2931
},
3032
"devDependencies": {
3133
"eslint": "^7.29.0",

web-integrations/google-secure-signals/react-client-side/package-lock.json

Lines changed: 58 additions & 58 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

web-integrations/google-secure-signals/react-client-side/package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,9 @@
3737
"flatted": "^3.4.2",
3838
"path-to-regexp@0": "0.1.13",
3939
"picomatch": "^2.3.2",
40-
"lodash": "^4.18.0"
40+
"lodash": "^4.18.0",
41+
"@babel/plugin-transform-modules-systemjs": ">=7.29.4",
42+
"fast-uri": ">=3.1.2"
4143
},
4244
"scripts": {
4345
"start": "node server.js",

web-integrations/google-secure-signals/server-side/package-lock.json

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

web-integrations/google-secure-signals/server-side/package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,9 @@
2727
"flatted": "^3.4.2",
2828
"path-to-regexp@0": "0.1.13",
2929
"node-forge": "^1.4.0",
30-
"picomatch": "^2.3.2"
30+
"picomatch": "^2.3.2",
31+
"@babel/plugin-transform-modules-systemjs": ">=7.29.4",
32+
"fast-uri": ">=3.1.2"
3133
},
3234
"devDependencies": {
3335
"eslint": "^7.29.0",

web-integrations/javascript-sdk/client-server/package-lock.json

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

web-integrations/javascript-sdk/client-server/package.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,9 @@
3232
"flatted": "^3.4.2",
3333
"path-to-regexp@0": "0.1.13",
3434
"node-forge": "^1.4.0",
35-
"picomatch": "^2.3.2"
35+
"picomatch": "^2.3.2",
36+
"@babel/plugin-transform-modules-systemjs": ">=7.29.4",
37+
"fast-uri": ">=3.1.2"
3638
},
3739
"resolutions": {
3840
"jws": "4.0.1",

0 commit comments

Comments
 (0)