opensource/dify
2
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-04-29 12:37:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: resolve devalue prototype pollution vulnerability (#25709)

Browse Source
This commit is contained in:
-LAN- 2025-09-15 13:26:36 +08:00 committed by GitHub
parent bab4975809
commit bb5b8d2902
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
web/package.json
View File

@ -244,11 +244,12 @@
"pnpm": { "pnpm": {
"overrides": { "overrides": {
"@eslint/plugin-kit@<0.3.4": "0.3.4", "@eslint/plugin-kit@<0.3.4": "0.3.4",
"brace-expansion@<2.0.2": "2.0.2",
"devalue@<5.3.2": "5.3.2",
"esbuild@<0.25.0": "0.25.0", "esbuild@<0.25.0": "0.25.0",
"pbkdf2@<3.1.3": "3.1.3", "pbkdf2@<3.1.3": "3.1.3",
"vite@<6.2.7": "6.2.7",
"prismjs@<1.30.0": "1.30.0", "prismjs@<1.30.0": "1.30.0",
"brace-expansion@<2.0.2": "2.0.2", "vite@<6.2.7": "6.2.7",
"array-includes": "npm:@nolyfill/array-includes@^1", "array-includes": "npm:@nolyfill/array-includes@^1",
"array.prototype.findlast": "npm:@nolyfill/array.prototype.findlast@^1", "array.prototype.findlast": "npm:@nolyfill/array.prototype.findlast@^1",
"array.prototype.findlastindex": "npm:@nolyfill/array.prototype.findlastindex@^1", "array.prototype.findlastindex": "npm:@nolyfill/array.prototype.findlastindex@^1",

9
web/pnpm-lock.yaml generated
View File

@ -43,6 +43,7 @@ overrides:
string.prototype.trimend: npm:@nolyfill/string.prototype.trimend@^1 string.prototype.trimend: npm:@nolyfill/string.prototype.trimend@^1
typed-array-buffer: npm:@nolyfill/typed-array-buffer@^1 typed-array-buffer: npm:@nolyfill/typed-array-buffer@^1
which-typed-array: npm:@nolyfill/which-typed-array@^1 which-typed-array: npm:@nolyfill/which-typed-array@^1
devalue@<5.3.2: 5.3.2
importers: importers:
@ -4825,8 +4826,8 @@ packages:
detect-node-es@1.1.0: detect-node-es@1.1.0:
resolution: {integrity: sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==} resolution: {integrity: sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==}
devalue@5.1.1: devalue@5.3.2:
resolution: {integrity: sha512-maua5KUiapvEwiEAe+XnlZ3Rh0GD+qI1J/nb9vrJc3muPXvcF/8gXYTWF76+5DAqHyDUtOIImEuo0YKE9mshVw==} resolution: {integrity: sha512-UDsjUbpQn9kvm68slnrs+mfxwFkIflOhkanmyabZ8zOYk8SMEIbJ3TK+88g70hSIeytu4y18f0z/hYHMTrXIWw==}
devlop@1.1.0: devlop@1.1.0:
resolution: {integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==} resolution: {integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==}
@ -11981,7 +11982,7 @@ snapshots:
'@tanstack/form-core': 1.14.0 '@tanstack/form-core': 1.14.0
'@tanstack/react-store': 0.7.3(react-dom@19.1.1(react@19.1.1))(react@19.1.1) '@tanstack/react-store': 0.7.3(react-dom@19.1.1(react@19.1.1))(react@19.1.1)
decode-formdata: 0.9.0 decode-formdata: 0.9.0
devalue: 5.1.1 devalue: 5.3.2
react: 19.1.1 react: 19.1.1
transitivePeerDependencies: transitivePeerDependencies:
- react-dom - react-dom
@ -13842,7 +13843,7 @@ snapshots:
detect-node-es@1.1.0: {} detect-node-es@1.1.0: {}
devalue@5.1.1: {} devalue@5.3.2: {}
devlop@1.1.0: devlop@1.1.0:
dependencies: dependencies: