Skip to content

fix: corrige vulnerabilidades HIGH/MODERATE em brace-expansion e ajv - #31

Merged
LeoFalco merged 1 commit into
masterfrom
claude/fervent-shannon-ee2ipv
Jul 26, 2026
Merged

fix: corrige vulnerabilidades HIGH/MODERATE em brace-expansion e ajv#31
LeoFalco merged 1 commit into
masterfrom
claude/fervent-shannon-ee2ipv

Conversation

@LeoFalco

Copy link
Copy Markdown
Contributor

Correção de vulnerabilidades de segurança no package-lock.json via npm audit fix (sem --force, sem major bumps).

Pacote De Para Severidade Advisory
brace-expansion 1.1.11 1.1.16 HIGH GHSA-3jfq-g458-7qm9 (ReDoS)
ajv 6.12.6 6.15.0 MODERATE prototype pollution

Apenas package-lock.json foi alterado. Resultado final: 0 vulnerabilidades detectadas pelo npm audit.


Generated by Claude Code

- brace-expansion 1.1.11 -> 1.1.16 (HIGH - GHSA-3jfq-g458-7qm9)
- ajv 6.12.6 -> 6.15.0 (MODERATE - protoype pollution)

Fixes aplicados via npm audit fix (sem --force, sem major bumps).
Resultado final: 0 vulnerabilidades.
@LeoFalco
LeoFalco requested a review from a team as a code owner July 24, 2026 20:26
@LeoFalco
LeoFalco merged commit c27f6ab into master Jul 26, 2026
4 checks passed
@LeoFalco
LeoFalco deleted the claude/fervent-shannon-ee2ipv branch July 26, 2026 14:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants