From 5432dd41d6b5eadcbd40eae51b46d3a97f8175bb Mon Sep 17 00:00:00 2001 From: anupam-orbis Date: Sat, 14 Nov 2026 21:17:48 +0000 Subject: [PATCH] fix: CVE-2026-85152 security vulnerability Automated dependency upgrade by OrbisAI Security --- bun.lock | 4 ++-- package.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/bun.lock b/bun.lock index 80e4072..d52ac7d 100644 --- a/bun.lock +++ b/bun.lock @@ -6,7 +6,7 @@ "name": "zcode-proxy", "dependencies": { "happy-dom": "^20.11.6", - "undici": "^8.10.0", + "undici": "8.12.2", "yaml": "^2.5.0", }, "devDependencies": { @@ -86,7 +86,7 @@ "happy-dom": ["happy-dom@20.11.6", "", { "dependencies": { "@types/node": ">=20.0.0", "@types/whatwg-mimetype": "^3.0.2", "@types/ws": "^8.18.1", "buffer-image-size": "^0.6.4", "entities": "^7.0.1", "whatwg-mimetype": "^3.0.0", "ws": "^8.21.0" } }, "sha512-Hldbg8AdAa5a5oDcZpjqnGitp7JB0hqWmfv/8qr+kft4vzSD8BHsbdRfzYvL/0QcbKcURC/yyoygbeDQarPvYg=="], - "undici": ["undici@8.10.0", "", {}, "sha512-HvltHd7avK13QIw/oLe4qoOLyoVSoafqJ2jYOrtMRBkbYT31eiBQ8O0ehRKZiEZCMEyLFQNIADpgCWC5fALvYQ=="], + "undici": ["undici@8.12.2", "", {}, "sha512-XtuDWVdqTLr3NAxm2ly9/hU6kUsJOgGh1RASzMBbsw6aWCOaQzHdW+QQDfdERjfJ2V5vL5pRPa4RetO9UfivDg=="], "undici-types": ["undici-types@7.24.6", "", {}, "sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg=="], diff --git a/package.json b/package.json index f8cd9d5..85937dd 100644 --- a/package.json +++ b/package.json @@ -18,7 +18,7 @@ }, "dependencies": { "happy-dom": "^20.11.6", - "undici": "^8.10.0", + "undici": "8.12.2", "yaml": "^2.5.0" }, "devDependencies": {