Skip to content

Bump the npm_and_yarn group across 1 directory with 3 updates #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the npm_and_yarn group across 1 directory with 3 updates #6

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
100 changes: 50 additions & 50 deletions package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "postcss" 8.4.31 is vulnerable to GHSA-r28c-9q8g-f849 - PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure. Vulnerability score: 7.5 (high).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "postcss" 8.5.8 is vulnerable to CVE-2026-45623 - PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments. Vulnerability score: 7.5 (high).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "postcss" 8.5.8 is vulnerable to CVE-2026-41305 - PostCSS has XSS via Unescaped </style> in its CSS Stringify Output. Vulnerability score: 6.1 (medium).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "postcss" 8.5.8 is vulnerable to GHSA-r28c-9q8g-f849 - PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure. Vulnerability score: 7.5 (high).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "@babel/core" 7.29.0 is vulnerable to CVE-2026-49356 - @babel/core: Arbitrary File Read via sourceMappingURL Comment. Vulnerability score: 3.2 (low).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "qs" 6.15.0 is vulnerable to CVE-2026-8723 - qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set. Vulnerability score: 5.3 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "@hono/node-server" 1.19.13 is vulnerable to GHSA-frvp-7c67-39w9 - Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`). Vulnerability score: 5.9 (medium).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "sharp" 0.34.5 is vulnerable to GHSA-f88m-g3jw-g9cj - sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591.

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "body-parser" 2.2.2 is vulnerable to CVE-2026-12590 - body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement. Vulnerability score: 3.7 (low).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "brace-expansion" 1.1.13 is vulnerable to CVE-2026-13149 - brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups. Vulnerability score: 5.3 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "ws" 8.20.0 is vulnerable to CVE-2026-45736 - ws: Uninitialized memory disclosure. Vulnerability score: 4.4 (medium).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "brace-expansion" 1.1.13 is vulnerable to CVE-2026-14257 - brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash. Vulnerability score: 7.5 (high).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "ws" 8.20.0 is vulnerable to CVE-2026-48779 - ws: Memory exhaustion DoS from tiny fragments and data chunks. Vulnerability score: 7.5 (high).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "brace-expansion" 5.0.5 is vulnerable to CVE-2026-13149 - brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups. Vulnerability score: 5.3 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "brace-expansion" 5.0.5 is vulnerable to CVE-2026-45149 - brace-expansion: Large numeric range defeats documented `max` DoS protection. Vulnerability score: 6.5 (medium).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "brace-expansion" 5.0.5 is vulnerable to CVE-2026-14257 - brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash. Vulnerability score: 7.5 (high).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "fast-uri" 3.1.0 is vulnerable to CVE-2026-13676 - fast-uri vulnerable to host confusion via failed IDN canonicalization. Vulnerability score: 7.5 (high).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "fast-uri" 3.1.0 is vulnerable to CVE-2026-6321 - fast-uri vulnerable to path traversal via percent-encoded dot segments. Vulnerability score: 7.5 (high).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "fast-uri" 3.1.0 is vulnerable to CVE-2026-16221 - fast-uri vulnerable to host confusion via literal backslash authority delimiter. Vulnerability score: 7.5 (high).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "fast-uri" 3.1.0 is vulnerable to CVE-2026-6322 - fast-uri vulnerable to host confusion via percent-encoded authority delimiters. Vulnerability score: 7.5 (high).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-47676 - Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths. Vulnerability score: 5.3 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-47675 - Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection. Vulnerability score: 4.3 (medium).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-54290 - hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard. Vulnerability score: 7.1 (high).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-47673 - Hono: JWT middleware accepts any Authorization scheme, not only Bearer. Vulnerability score: 4.8 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-59896 - hono/jsx does not isolate context per request, leading to cross-request data disclosure. Vulnerability score: 6.5 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-54287 - hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice. Vulnerability score: 5.3 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-54288 - hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`. Vulnerability score: 6.5 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-59895 - Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility. Vulnerability score: 6.1 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-54289 - hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest. Vulnerability score: 4.8 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-54286 - hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`). Vulnerability score: 5.9 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-59897 - Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication. Vulnerability score: 4.8 (medium).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "hono" 4.12.18 is vulnerable to CVE-2026-47674 - Hono: IP Restriction bypasses static deny rules for non-canonical IPv6 . Vulnerability score: 5.3 (medium).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "js-yaml" 4.1.1 is vulnerable to CVE-2026-59869 - js-yaml: YAML merge-key chains can force quadratic CPU consumption. Vulnerability score: 7.5 (high).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "js-yaml" 4.1.1 is vulnerable to CVE-2026-53550 - JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases. Vulnerability score: 5.3 (medium).

Check failure on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "postcss" 8.4.31 is vulnerable to CVE-2026-45623 - PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments. Vulnerability score: 7.5 (high).

Check warning on line 1 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "postcss" 8.4.31 is vulnerable to CVE-2026-41305 - PostCSS has XSS via Unescaped </style> in its CSS Stringify Output. Vulnerability score: 6.1 (medium).
"name": "dashboard",
"version": "0.1.0",
"private": true,
Expand All @@ -18,7 +18,7 @@
"clsx": "^2.1.1",
"framer-motion": "^12.38.0",
"lucide-react": "^1.7.0",
"next": "16.2.1",
"next": "16.2.3",

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44575 - Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes. Vulnerability score: 7.5 (high).

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-45109 - Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up. Vulnerability score: 7.5 (high).

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44573 - Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n. Vulnerability score: 7.5 (high).

Check warning on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44572 - Next.js's Middleware / Proxy redirects can be cache-poisoned. Vulnerability score: 3.7 (low).

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-64647 - Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences.

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44574 - Next.js has a Middleware / Proxy bypass through dynamic route parameter injection. Vulnerability score: 8.1 (high).

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-64646 - Next.js: Unbounded Server Action payload in Edge runtime.

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-64648 - Next.js: Cache confusion of response bodies for requests with bodies.

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-64642 - Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale.

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-64649 - Next.js: Server-Side Request Forgery in Server Actions on custom servers.

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to GHSA-8h8q-6873-q5fj - Next.js Vulnerable to Denial of Service with Server Components. Vulnerability score: 7.5 (high).

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-64643 - Next.js: Unauthenticated disclosure of internal Server Function endpoints.

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44578 - Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades. Vulnerability score: 8.6 (high).

Check warning on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44581 - Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces. Vulnerability score: 4.7 (medium).

Check warning on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44580 - Next.js has cross-site scripting in beforeInteractive scripts with untrusted input. Vulnerability score: 6.1 (medium).

Check warning on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44577 - Next.js has a Denial of Service in the Image Optimization API. Vulnerability score: 5.9 (medium).

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-64641 - Next.js: Denial of Service in App Router using Server Actions.

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44579 - Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components. Vulnerability score: 7.5 (high).

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-64645 - Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname.

Check failure on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-64644 - Next.js: Denial of Service in the Image Optimization API using SVGs.

Check warning on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44582 - Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting. Vulnerability score: 3.7 (low).

Check warning on line 21 in package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning 

Artifact "next" 16.2.3 is vulnerable to CVE-2026-44576 - Next.js vulnerable to cache poisoning in React Server Component responses. Vulnerability score: 5.4 (medium).
"radix-ui": "^1.4.3",
"react": "19.2.4",
"react-dom": "19.2.4",
Expand Down
Loading