Skip to content

fix(deps): address open security vulnerabilities#71

Merged
sadjow merged 1 commit into
mainfrom
fix/security-vulnerabilities
Dec 3, 2025
Merged

fix(deps): address open security vulnerabilities#71
sadjow merged 1 commit into
mainfrom
fix/security-vulnerabilities

Conversation

@sadjow

@sadjow sadjow commented Dec 2, 2025

Copy link
Copy Markdown
Member

Summary

  • Upgrade eslint from 9.26.0 to 9.39.1 (removes @modelcontextprotocol/sdk transitive dependency)
  • Upgrade @nuxt/eslint and @nuxt/eslint-config to 1.11.0
  • Upgrade playground nuxt to 4.2.1
  • Add tmp resolution to 0.2.4

Vulnerabilities Addressed

# Package Severity Fix
90 @modelcontextprotocol/sdk < 1.24.0 HIGH eslint upgrade removes this dep
84, 83 node-forge < 1.3.2 HIGH/MEDIUM Resolution already in place
72, 65, 63 vite 7.1.x MEDIUM/LOW Resolution already in place
58 tmp <= 0.2.3 LOW Added resolution

@sadjow
sadjow marked this pull request as ready for review December 2, 2025 22:57
@sadjow
sadjow merged commit b3d3fe5 into main Dec 3, 2025
2 checks passed
@sadjow
sadjow deleted the fix/security-vulnerabilities branch March 11, 2026 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants