From 41ec3a91b771a7e35c08c2d099dd187b543b1ea5 Mon Sep 17 00:00:00 2001
From: Abner <22141172+Silentely@users.noreply.github.com>
Date: Sat, 11 Jul 2026 13:11:52 +0800
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=20security:=20=E9=80=9A=E8=BF=87?=
 =?UTF-8?q?=20overrides=20=E5=8D=87=E7=BA=A7=20ws=20=E8=87=B3=208.21.0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

修复 GHSA-96hv-2xvq-fx4p：小分片导致内存耗尽 DoS（jsdom 传递依赖）。
---
 package-lock.json | 6 +++---
 package.json      | 3 ++-
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c8787b7..7eb2097 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16404,9 +16404,9 @@
       }
     },
     "node_modules/ws": {
-      "version": "8.19.0",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-8.19.0.tgz",
-      "integrity": "sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==",
+      "version": "8.21.0",
+      "resolved": "https://registry.npmmirror.com/ws/-/ws-8.21.0.tgz",
+      "integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==",
       "dev": true,
       "license": "MIT",
       "engines": {
diff --git a/package.json b/package.json
index 79712c5..58aa73e 100644
--- a/package.json
+++ b/package.json
@@ -106,6 +106,7 @@
     "serialize-javascript": "^7.0.5",
     "path-to-regexp": "^0.1.13",
     "rollup": "^2.80.0",
-    "uuid": "^14.0.0"
+    "uuid": "^14.0.0",
+    "ws": "^8.21.0"
   }
 }