From 1631857a9c6bd0f9b5fa80ddf1de8a20bc53b5ad Mon Sep 17 00:00:00 2001 From: mcinquin Date: Mon, 2 Nov 2026 16:17:36 +0100 Subject: [PATCH] chore(security): bump re2js, katex and npm to fix some security issues fix #52, #53, #74, #78, #84, #102, #107 --- package-lock.json | 72 +++++++++++++++++++++++------------------------ package.json | 5 +++- 2 files changed, 40 insertions(+), 37 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6b2064a..c049d70 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12258,9 +12258,9 @@ } }, "node_modules/katex": { - "version": "0.16.47", - "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.47.tgz", - "integrity": "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==", + "version": "0.18.2", + "resolved": "https://registry.npmjs.org/katex/-/katex-0.18.2.tgz", + "integrity": "sha512-3snve4y0SXTMequLim1FMiPvLGElySam0blN5xQZBqEY3lOJz1TnuaaiugnBZBqHzlSAGmFTYL7MCQkORuLKCA==", "dev": true, "funding": [ "https://opencollective.com/katex", @@ -14146,9 +14146,9 @@ } }, "node_modules/npm": { - "version": "11.18.0", - "resolved": "https://registry.npmjs.org/npm/-/npm-11.18.0.tgz", - "integrity": "sha512-T67M4L5wNm0cZ7EBLErcEkY1SmzEW/WJ+SADBzsFUY1UdAPfFHXFQtZ6SEXiK0+vzXysCvAsepbMaBTwnrAD+w==", + "version": "11.21.1", + "resolved": "https://registry.npmjs.org/npm/-/npm-11.21.1.tgz", + "integrity": "sha512-YTzL6QBEJXyHcTu0JiUc7RKMp+mzlJtl7rGLmERaXUQeFHIMc9atdr6G9M9C8vDWbv40epoTQAzNL2/PtZVDhQ==", "bundleDependencies": [ "@isaacs/string-locale-compare", "@npmcli/arborist", @@ -14227,8 +14227,8 @@ ], "dependencies": { "@isaacs/string-locale-compare": "^1.1.0", - "@npmcli/arborist": "^9.9.0", - "@npmcli/config": "^10.12.0", + "@npmcli/arborist": "^9.9.3", + "@npmcli/config": "^10.14.0", "@npmcli/fs": "^5.0.0", "@npmcli/map-workspaces": "^5.0.3", "@npmcli/metavuln-calculator": "^9.0.3", @@ -14252,12 +14252,12 @@ "is-cidr": "^6.0.4", "json-parse-even-better-errors": "^5.0.0", "libnpmaccess": "^10.0.3", - "libnpmdiff": "^8.1.11", - "libnpmexec": "^10.3.1", - "libnpmfund": "^7.0.25", + "libnpmdiff": "^8.1.14", + "libnpmexec": "^10.3.4", + "libnpmfund": "^7.0.28", "libnpmorg": "^8.0.1", - "libnpmpack": "^9.1.11", - "libnpmpublish": "^11.2.0", + "libnpmpack": "^9.1.15", + "libnpmpublish": "^11.2.1", "libnpmsearch": "^9.0.1", "libnpmteam": "^8.0.2", "libnpmversion": "^8.0.4", @@ -14285,7 +14285,7 @@ "spdx-expression-parse": "^4.0.0", "ssri": "^13.0.1", "supports-color": "^10.2.2", - "tar": "^7.5.19", + "tar": "^7.5.22", "text-table": "~0.2.0", "tiny-relative-date": "^2.0.2", "treeverse": "^3.0.0", @@ -14387,7 +14387,7 @@ } }, "node_modules/npm/node_modules/@npmcli/arborist": { - "version": "9.9.0", + "version": "9.9.3", "dev": true, "inBundle": true, "license": "ISC", @@ -14435,7 +14435,7 @@ } }, "node_modules/npm/node_modules/@npmcli/config": { - "version": "10.12.0", + "version": "10.14.0", "dev": true, "inBundle": true, "license": "ISC", @@ -14780,7 +14780,7 @@ } }, "node_modules/npm/node_modules/brace-expansion": { - "version": "5.0.7", + "version": "5.0.12", "dev": true, "inBundle": true, "license": "MIT", @@ -14788,7 +14788,7 @@ "balanced-match": "^4.0.2" }, "engines": { - "node": "18 || 20 || >=22" + "node": "20 || >=22" } }, "node_modules/npm/node_modules/cacache": { @@ -14985,7 +14985,7 @@ } }, "node_modules/npm/node_modules/http-cache-semantics": { - "version": "4.2.0", + "version": "4.3.0", "dev": true, "inBundle": true, "license": "BSD-2-Clause" @@ -15072,7 +15072,7 @@ } }, "node_modules/npm/node_modules/ip-address": { - "version": "10.2.0", + "version": "10.7.2", "dev": true, "inBundle": true, "license": "MIT", @@ -15154,12 +15154,12 @@ } }, "node_modules/npm/node_modules/libnpmdiff": { - "version": "8.1.11", + "version": "8.1.14", "dev": true, "inBundle": true, "license": "ISC", "dependencies": { - "@npmcli/arborist": "^9.9.0", + "@npmcli/arborist": "^9.9.3", "@npmcli/installed-package-contents": "^4.0.0", "binary-extensions": "^3.0.0", "diff": "^8.0.2", @@ -15173,13 +15173,13 @@ } }, "node_modules/npm/node_modules/libnpmexec": { - "version": "10.3.1", + "version": "10.3.4", "dev": true, "inBundle": true, "license": "ISC", "dependencies": { "@gar/promise-retry": "^1.0.0", - "@npmcli/arborist": "^9.9.0", + "@npmcli/arborist": "^9.9.3", "@npmcli/package-json": "^7.0.0", "@npmcli/run-script": "^10.0.0", "ci-info": "^4.0.0", @@ -15196,12 +15196,12 @@ } }, "node_modules/npm/node_modules/libnpmfund": { - "version": "7.0.25", + "version": "7.0.28", "dev": true, "inBundle": true, "license": "ISC", "dependencies": { - "@npmcli/arborist": "^9.9.0" + "@npmcli/arborist": "^9.9.3" }, "engines": { "node": "^20.17.0 || >=22.9.0" @@ -15221,12 +15221,12 @@ } }, "node_modules/npm/node_modules/libnpmpack": { - "version": "9.1.11", + "version": "9.1.15", "dev": true, "inBundle": true, "license": "ISC", "dependencies": { - "@npmcli/arborist": "^9.9.0", + "@npmcli/arborist": "^9.9.3", "@npmcli/run-script": "^10.0.0", "npm-package-arg": "^13.0.0", "pacote": "^21.0.2" @@ -15236,7 +15236,7 @@ } }, "node_modules/npm/node_modules/libnpmpublish": { - "version": "11.2.0", + "version": "11.2.1", "dev": true, "inBundle": true, "license": "ISC", @@ -15709,7 +15709,7 @@ } }, "node_modules/npm/node_modules/postcss-selector-parser": { - "version": "7.1.4", + "version": "7.1.6", "dev": true, "inBundle": true, "license": "MIT", @@ -15931,7 +15931,7 @@ } }, "node_modules/npm/node_modules/tar": { - "version": "7.5.19", + "version": "7.5.22", "dev": true, "inBundle": true, "license": "BlueOak-1.0.0", @@ -16027,7 +16027,7 @@ } }, "node_modules/npm/node_modules/undici": { - "version": "6.27.0", + "version": "6.29.0", "dev": true, "inBundle": true, "license": "MIT", @@ -17351,13 +17351,13 @@ } }, "node_modules/re2js": { - "version": "2.8.6", - "resolved": "https://registry.npmjs.org/re2js/-/re2js-2.8.6.tgz", - "integrity": "sha512-xLgQil4kIUCrAzVk9fRSkxkFNwmygLFjVxXrLc65aE1F0+Zsb8rxumFBy4XKyvgMCTL6kilDq3EZ0piE2dP/Dg==", + "version": "2.8.7", + "resolved": "https://registry.npmjs.org/re2js/-/re2js-2.8.7.tgz", + "integrity": "sha512-bRSL/vn3KAmlGfGNoVpcsBXLaVvl6AbuvMMWbz0m3vBj60nj+p2/biozfBUOSBP+5XTduF6mr6IO/ZVjmqqkVQ==", "dev": true, "license": "MIT", "engines": { - "node": ">=18.0.0" + "node": ">=20.0.0" } }, "node_modules/react": { diff --git a/package.json b/package.json index 4501b62..5454c49 100644 --- a/package.json +++ b/package.json @@ -86,6 +86,9 @@ "deepmerge-ts": "^8.0.2", "mysql2": "^3.24.3", "undici": "^6.28.1", - "ip-address": "^10.7.1" + "ip-address": "^10.7.1", + "re2js": "2.8.7", + "katex": "0.18.2", + "npm": "11.21.1" } }