🔒 security: 通过 overrides 升级 ws 至 8.21.0

修复 GHSA-96hv-2xvq-fx4p:小分片导致内存耗尽 DoS(jsdom 传递依赖)。
This commit is contained in:
Abner
2026-07-11 13:11:52 +08:00
parent 5e55f0a569
commit 41ec3a91b7
2 changed files with 5 additions and 4 deletions

6
package-lock.json generated
View File

@@ -16404,9 +16404,9 @@
}
},
"node_modules/ws": {
"version": "8.19.0",
"resolved": "https://registry.npmjs.org/ws/-/ws-8.19.0.tgz",
"integrity": "sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==",
"version": "8.21.0",
"resolved": "https://registry.npmmirror.com/ws/-/ws-8.21.0.tgz",
"integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==",
"dev": true,
"license": "MIT",
"engines": {

View File

@@ -106,6 +106,7 @@
"serialize-javascript": "^7.0.5",
"path-to-regexp": "^0.1.13",
"rollup": "^2.80.0",
"uuid": "^14.0.0"
"uuid": "^14.0.0",
"ws": "^8.21.0"
}
}