Skip to content

Commit b4d9cc5

Browse files
authored
chore(deps): resolve tar-fs symlink validation bypass vulnerability (#81)
Updates testcontainers from 11.7.0 to 11.7.1 and overrides tar-fs from 3.1.0 to 3.1.1 to patch CVE affecting symlink validation. Also updates @tsconfig/node20 to use 'latest' for explicit versioning. Fixes #6
1 parent 057d7b8 commit b4d9cc5

File tree

2 files changed

+10
-10
lines changed

2 files changed

+10
-10
lines changed

package-lock.json

Lines changed: 8 additions & 8 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@
5555
"jest-junit": "^16.0.0",
5656
"knip": "^5.64.1",
5757
"prettier": "^3.6.2",
58-
"testcontainers": "^11.7.0",
58+
"testcontainers": "^11.7.1",
5959
"ts-jest": "^29.4.4",
6060
"typescript": "^5.9.3"
6161
},
@@ -69,6 +69,6 @@
6969
},
7070
"overrides": {
7171
"tmp": "^0.2.4",
72-
"tar-fs": "3.1.0"
72+
"tar-fs": "3.1.1"
7373
}
7474
}

0 commit comments

Comments
 (0)