Skip to content

Commit cf3c8ed

Browse files
priyanshu92claude
andauthored
Fix Dependabot security vulnerability in liquidjs (#134) (#1514)
- Updated liquidjs from 10.24.0 to 10.25.0 - Addresses path traversal fallback vulnerability (high severity) - Bumped minimum version constraint from ^10.2.0 to ^10.25.0 Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent 15c4141 commit cf3c8ed

2 files changed

Lines changed: 5 additions & 6 deletions

File tree

package-lock.json

Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1827,7 +1827,7 @@
18271827
"gpt-tokenizer": "^2.1.1",
18281828
"gulp": "^5.0.0",
18291829
"https-browserify": "^1.0.0",
1830-
"liquidjs": "^10.2.0",
1830+
"liquidjs": "^10.25.0",
18311831
"n-readlines": "^1.0.1",
18321832
"puppeteer-core": "^22.13.1",
18331833
"recursive-readdir": "^2.2.3",
@@ -1875,4 +1875,3 @@
18751875
}
18761876
}
18771877
}
1878-

0 commit comments

Comments
 (0)