Skip to content

Commit 236a5ca

Browse files
bartvwclaude
andcommitted
Fix vulnerable transitive dependencies via npm overrides
Add overrides for flatted (^3.4.2) and minimatch (^10.0.0) to resolve high-severity ReDoS/prototype pollution vulnerabilities in transitive devDependencies. The ajv vulnerability was not overridden as it requires the $data option which none of the ESLint plugins use, and forcing v8 breaks eslint-plugin-json-schema-validator's v6 API usage. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 3e65a25 commit 236a5ca

2 files changed

Lines changed: 92 additions & 127 deletions

File tree

package-lock.json

Lines changed: 88 additions & 127 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,10 @@
3232
"typescript-eslint": "8.35.1",
3333
"vitest": "4.1.0"
3434
},
35+
"overrides": {
36+
"flatted": "^3.4.2",
37+
"minimatch": "^10.0.0"
38+
},
3539
"dependencies": {
3640
"obsidian": "latest"
3741
}

0 commit comments

Comments
 (0)