From 9717e0af4d3f1445b32e11d18a906bd4bda36f45 Mon Sep 17 00:00:00 2001 From: lcf2212dev Date: Tue, 15 Sep 2026 16:53:28 -0300 Subject: [PATCH] fix(deps): alias image-size to image-size-next@2.1.1 CVE-2025-71329 / CVE-2025-71330. Not affiliated with the original image-size maintainer. --- package-lock.json | 13 +++++++------ package.json | 2 +- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6c02cbc..4cac289 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,7 +12,7 @@ "assert": "^2.1.0", "aws-sdk": "^2.1692.0", "canvas": "^3.2.1", - "image-size": "2.0.2", + "image-size": "npm:image-size-next@^2.1.1", "mkdirp": "^3.0.1", "mz": "2.7.0", "path": "^0.12.7", @@ -6438,15 +6438,16 @@ "license": "BSD-3-Clause" }, "node_modules/image-size": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/image-size/-/image-size-2.0.2.tgz", - "integrity": "sha512-IRqXKlaXwgSMAMtpNzZa1ZAe8m+Sa1770Dhk8VkSsP9LS+iHD62Zd8FQKs8fbPiagBE7BzoFX23cxFnwshpV6w==", + "name": "image-size-next", + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/image-size-next/-/image-size-next-2.1.1.tgz", + "integrity": "sha512-n+DFjUct+G9mxZck+lvzqrTsqBJvSHMs6iEo//W5iAgRV7oUbrh1JWmKgAEpmyRB5lw6plIQizS1wK1dvrsvAw==", "license": "MIT", "bin": { - "image-size": "bin/image-size.js" + "image-size-next": "bin/image-size-next.js" }, "engines": { - "node": ">=16.x" + "node": ">=18" } }, "node_modules/import-local": { diff --git a/package.json b/package.json index 7047529..46318aa 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,7 @@ "assert": "^2.1.0", "aws-sdk": "^2.1692.0", "canvas": "^3.2.1", - "image-size": "2.0.2", + "image-size": "npm:image-size-next@2.1.1", "mkdirp": "^3.0.1", "mz": "2.7.0", "path": "^0.12.7",