diff --git a/.changeset/bump-ws-cve-2026-48779.md b/.changeset/bump-ws-cve-2026-48779.md deleted file mode 100644 index ec81e4db..00000000 --- a/.changeset/bump-ws-cve-2026-48779.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"sandbox": patch ---- - -Bump `ws` from `^8.18.3` to `^8.21.0` to address CVE-2026-48779, a high-severity memory exhaustion DoS triggered by a high volume of tiny fragments and data chunks. diff --git a/packages/sandbox/CHANGELOG.md b/packages/sandbox/CHANGELOG.md index 0c5990c1..56ff2fec 100644 --- a/packages/sandbox/CHANGELOG.md +++ b/packages/sandbox/CHANGELOG.md @@ -1,5 +1,11 @@ # sandbox +## 3.2.2 + +### Patch Changes + +- Bump `ws` from `^8.18.3` to `^8.21.0` to address CVE-2026-48779, a high-severity memory exhaustion DoS triggered by a high volume of tiny fragments and data chunks. ([#228](https://github.com/vercel/sandbox/pull/228)) + ## 3.2.1 ### Patch Changes diff --git a/packages/sandbox/docs/index.md b/packages/sandbox/docs/index.md index 826f3c58..b1a30e3d 100644 --- a/packages/sandbox/docs/index.md +++ b/packages/sandbox/docs/index.md @@ -1,7 +1,7 @@ ## `sandbox --help` ``` -sandbox 3.2.1 +sandbox 3.2.2 ▲ sandbox [options] diff --git a/packages/sandbox/package.json b/packages/sandbox/package.json index 88dd5ba5..76009d74 100644 --- a/packages/sandbox/package.json +++ b/packages/sandbox/package.json @@ -1,7 +1,7 @@ { "name": "sandbox", "description": "Command line interface for Vercel Sandbox", - "version": "3.2.1", + "version": "3.2.2", "scripts": { "clean": "rm -rf node_modules dist", "sandbox": "ts-node ./src/sandbox.ts",