Commit 37db9d9
Fix Dependabot security vulnerabilities in undici
- Added npm overrides for undici to resolve 6 open alerts
- undici@7.22.0 -> ^7.24.0 (via @vscode/vsce -> cheerio)
- undici@6.23.0 -> ^6.24.0 (via release-it)
- Addresses WebSocket overflow (high), HTTP smuggling (medium),
and CRLF injection (medium) vulnerabilities
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>1 parent b78f0bd commit 37db9d9
2 files changed
Lines changed: 412 additions & 407 deletions
0 commit comments