Skip to content
This repository was archived by the owner on Oct 27, 2026. It is now read-only.

Commit cbf3250

Browse files
teallarsonteallarson
authored
chore(deps): force qs >=6.16.0 via pnpm override (#1187)
1 parent 325c047 commit cbf3250

2 files changed

Lines changed: 16 additions & 12 deletions

File tree

‎pnpm-lock.yaml‎

Lines changed: 14 additions & 12 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pnpm-workspace.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,3 +29,5 @@ overrides:
2929
nanoid: ">=3.3.18 <4"
3030
# Force fflate (via posthog-js) past the unzipSync infinite loop on malformed ZIP64 archives (fixed in 0.4.9). Cap below 0.5 to stay within posthog-js's ^0.4.8 range.
3131
fflate: ">=0.4.9 <0.5"
32+
# Force qs (via instantsearch.js) past the array-limit bypass on bracket-key comma parsing (CVE-2026-82562) and the attacker-controlled isBuffer DoS (CVE-2026-82417), both fixed in 6.16.0. Cap below 7 to stay within instantsearch.js's ^6.5.1 range.
33+
qs: ">=6.16.0 <7"

0 commit comments

Comments
 (0)