Fix npm audit vulnerabilities
Bump @n8n/node-cli to ^0.24.1 and remove stale form-data override. Add overrides for transitive sub-dependencies with no upstream fix: - brace-expansion ^5.0.5 (ReDoS / process hang) - minimatch@9 ^9.0.9 (ReDoS in 9.0.0-9.0.6) - langsmith ^0.5.0 (SSRF via tracing header injection) - handlebars 4.7.9 (prototype pollution / XSS) - @langchain/community ^1.1.25 (SSRF bypass) Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
@@ -55,7 +55,7 @@
|
||||
"n8n-workflow": "*"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@n8n/node-cli": "^0.23.1",
|
||||
"@n8n/node-cli": "^0.24.1",
|
||||
"eslint": "^9.39.2"
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user