danvics/Pulse
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: upgrade vite to 6.4.1 to resolve CVE-2025-62522

Browse source 
Fixes Dependabot alert #33 - path traversal vulnerability in vite's
server.fs.deny when using backslash on Windows. Upgraded from 6.3.5 to 6.4.1.
This commit is contained in:
rcourtman 2025-10-21 12:41:08 +00:00
parent 2786afdff0
commit acedd18c07
2 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
frontend-modern/package-lock.json generated
View file

Binary file not shown.

2
frontend-modern/package.json
View file

@ -47,7 +47,7 @@
"prettier": "^3.3.0", "prettier": "^3.3.0",
"tailwindcss": "^3.4.0", "tailwindcss": "^3.4.0",
"typescript": "^5.3.0", "typescript": "^5.3.0",
"vite": "^6.3.5", "vite": "^6.4.1",
"vite-plugin-solid": "^2.8.0", "vite-plugin-solid": "^2.8.0",
"vitest": "^3.2.4" "vitest": "^3.2.4"
} }