From b817b03a020733f6461f7e9c3912cc324475e466 Mon Sep 17 00:00:00 2001 From: Jamkris Date: Tue, 17 Mar 2026 16:50:04 +0900 Subject: [PATCH] fix: resolve high severity flatted vulnerability MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Update flatted 3.3.3 → 3.4.1 to fix unbounded recursion DoS in parse() (GHSA-25h7-pfq9-p65f). npm audit now passes cleanly. --- package-lock.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index a7bc57d..f6c8436 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "everything-gemini-code", - "version": "1.0.19", + "version": "1.0.22", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "everything-gemini-code", - "version": "1.0.19", + "version": "1.0.22", "license": "MIT", "dependencies": { "punycode": "^2.3.1" @@ -818,9 +818,9 @@ } }, "node_modules/flatted": { - "version": "3.3.3", - "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.3.tgz", - "integrity": "sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==", + "version": "3.4.1", + "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.1.tgz", + "integrity": "sha512-IxfVbRFVlV8V/yRaGzk0UVIcsKKHMSfYw66T/u4nTwlWteQePsxe//LjudR1AMX4tZW3WFCh3Zqa/sjlqpbURQ==", "dev": true, "license": "ISC" },