This is an automated email from the ASF dual-hosted git repository.
mridulpathak pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-plugins.git
The following commit(s) were added to refs/heads/release24.09 by this push:
new dea53ccf7 Fixed: Vulnerable source-map-js in example/vite-react-app
flagged by Dependabot security alert
dea53ccf7 is described below
commit dea53ccf73b1aec80e8dc55b2ff117c093c0d1ce
Author: Mridul Pathak <[email protected]>
AuthorDate: Fri Oct 9 12:26:05 2026 +0530
Fixed: Vulnerable source-map-js in example/vite-react-app flagged by
Dependabot security alert
Updated the lockfile entry for source-map-js from 1.2.1 to 1.2.2, fixing an
event-loop denial of service through indexed source-map section offsets. The
dependency is pulled in transitively by postcss, whose declared range already
permits the fixed version, so only the lockfile needed refreshing.
---
example/vite-react-app/package-lock.json | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/example/vite-react-app/package-lock.json
b/example/vite-react-app/package-lock.json
index 3f32fe1b0..57b062730 100644
--- a/example/vite-react-app/package-lock.json
+++ b/example/vite-react-app/package-lock.json
@@ -1168,9 +1168,9 @@
"license": "MIT"
},
"node_modules/source-map-js": {
- "version": "1.2.1",
- "resolved":
"https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz";,
- "integrity":
"sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+ "version": "1.2.2",
+ "resolved":
"https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz";,
+ "integrity":
"sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
"dev": true,
"license": "BSD-3-Clause",
"engines": {
