Skip to content

chore(security): address CVE-2025-62718/-2026-40175 #2737

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tido64 merged 1 commit into from
Apr 14, 2026
+52 −56
Merged

chore(security): address CVE-2025-62718/-2026-40175 #2737

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
108 changes: 52 additions & 56 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3292,20 +3292,19 @@ __metadata:
linkType: hard

"@puppeteer/browsers@npm:^2.2.0":
version: 2.3.1
resolution: "@puppeteer/browsers@npm:2.3.1"
version: 2.13.0
resolution: "@puppeteer/browsers@npm:2.13.0"
dependencies:
debug: "npm:^4.3.6"
debug: "npm:^4.4.3"
extract-zip: "npm:^2.0.1"
progress: "npm:^2.0.3"
proxy-agent: "npm:^6.4.0"
semver: "npm:^7.6.3"
tar-fs: "npm:^3.0.6"
unbzip2-stream: "npm:^1.4.3"
proxy-agent: "npm:^6.5.0"
semver: "npm:^7.7.4"
tar-fs: "npm:^3.1.1"
yargs: "npm:^17.7.2"
bin:
browsers: lib/cjs/main-cli.js
checksum: 10c0/2dd195b35f2b30bd6f3c3eebfb2612bed333b0f1fdffd068903c26e8cb941b1bc8522a3b2dd0b8412e85ffa080f93bdd59703e380de807cdb02d88c99caab5db
checksum: 10c0/90c761200da538234100a7f7cd0677c60cfcfbf710445fb2d82ece34bf3b5a015958919d110d7041a0680fe1d690e3e7737594fe2efd6a7dac8681ef646ecc3e
languageName: node
linkType: hard

Expand Down Expand Up @@ -5173,10 +5172,10 @@ __metadata:
languageName: node
linkType: hard

"agent-base@npm:^7.0.2, agent-base@npm:^7.1.0, agent-base@npm:^7.1.2":
version: 7.1.3
resolution: "agent-base@npm:7.1.3"
checksum: 10c0/6192b580c5b1d8fb399b9c62bf8343d76654c2dd62afcb9a52b2cf44a8b6ace1e3b704d3fe3547d91555c857d3df02603341ff2cb961b9cfe2b12f9f3c38ee11
"agent-base@npm:^7.1.0, agent-base@npm:^7.1.2":
version: 7.1.4
resolution: "agent-base@npm:7.1.4"
checksum: 10c0/c2c9ab7599692d594b6a161559ada307b7a624fa4c7b03e3afdb5a5e31cd0e53269115b620fcab024c5ac6a6f37fa5eb2e004f076ad30f5f7e6b8b671f7b35fe
languageName: node
linkType: hard

Expand Down Expand Up @@ -5850,13 +5849,13 @@ __metadata:
linkType: hard

"axios@npm:^1.12.0, axios@npm:^1.13.5, axios@npm:^1.13.6, axios@npm:^1.4.0, axios@npm:^1.6.5, axios@npm:^1.6.7, axios@npm:^1.x":
version: 1.13.6
resolution: "axios@npm:1.13.6"
version: 1.15.0
resolution: "axios@npm:1.15.0"
dependencies:
follow-redirects: "npm:^1.15.11"
form-data: "npm:^4.0.5"
proxy-from-env: "npm:^1.1.0"
checksum: 10c0/51fb5af055c3b85662fa97df17d986ae2c37d13bf86d50b6bb36b6b3a2dec6966a1d3a14ab3774b71707b155ae3597ed9b7babdf1a1a863d1a31840cb8e7ec71
proxy-from-env: "npm:^2.1.0"
checksum: 10c0/47e0f860e98d4d7aa145e89ce0cae00e1fb0f1d2485f065c21fce955ddb1dba4103a46bd0e47acd18a27208a7f62c96249e620db575521b92a968619ab133409
languageName: node
linkType: hard

Expand Down Expand Up @@ -6078,9 +6077,9 @@ __metadata:
linkType: hard

"basic-ftp@npm:^5.0.2":
version: 5.2.1
resolution: "basic-ftp@npm:5.2.1"
checksum: 10c0/1d94eca86ed051fde73fd9c00c6853ee3d5a3b781963fb79adf04d384d34b576a53f9f0ba24955ded16606f88da60b383484254db4fe7a3985b60a57fcaa0530
version: 5.2.2
resolution: "basic-ftp@npm:5.2.2"
checksum: 10c0/a314a05450cf6311035d1bbb23c1ba1c8c0b991e7cb9bfafafc72a82bfafc540561c22eb046a58374688b7b9df502aa002fc28f4d366eb40964f307d131e06a6
languageName: node
linkType: hard

Expand Down Expand Up @@ -6239,7 +6238,7 @@ __metadata:
languageName: node
linkType: hard

"buffer@npm:^5.2.1, buffer@npm:^5.5.0":
"buffer@npm:^5.5.0":
version: 5.7.1
resolution: "buffer@npm:5.7.1"
dependencies:
Expand Down Expand Up @@ -6993,7 +6992,7 @@ __metadata:
languageName: node
linkType: hard

"debug@npm:4, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.3.1, debug@npm:^4.3.4, debug@npm:^4.3.5, debug@npm:^4.3.6, debug@npm:^4.4.0, debug@npm:^4.4.1, debug@npm:^4.4.3":
"debug@npm:4, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.3.1, debug@npm:^4.3.4, debug@npm:^4.3.5, debug@npm:^4.4.0, debug@npm:^4.4.1, debug@npm:^4.4.3":
version: 4.4.3
resolution: "debug@npm:4.4.3"
dependencies:
Expand Down Expand Up @@ -8981,7 +8980,7 @@ __metadata:
languageName: node
linkType: hard

"https-proxy-agent@npm:^7.0.1, https-proxy-agent@npm:^7.0.2, https-proxy-agent@npm:^7.0.3, https-proxy-agent@npm:^7.0.5, https-proxy-agent@npm:^7.0.6":
"https-proxy-agent@npm:^7.0.1, https-proxy-agent@npm:^7.0.5, https-proxy-agent@npm:^7.0.6":
version: 7.0.6
resolution: "https-proxy-agent@npm:7.0.6"
dependencies:
Expand Down Expand Up @@ -11828,23 +11827,23 @@ __metadata:
languageName: node
linkType: hard

"pac-proxy-agent@npm:^7.0.1":
version: 7.0.1
resolution: "pac-proxy-agent@npm:7.0.1"
"pac-proxy-agent@npm:^7.1.0":
version: 7.2.0
resolution: "pac-proxy-agent@npm:7.2.0"
dependencies:
"@tootallnate/quickjs-emscripten": "npm:^0.23.0"
agent-base: "npm:^7.0.2"
agent-base: "npm:^7.1.2"
debug: "npm:^4.3.4"
get-uri: "npm:^6.0.1"
http-proxy-agent: "npm:^7.0.0"
https-proxy-agent: "npm:^7.0.2"
pac-resolver: "npm:^7.0.0"
socks-proxy-agent: "npm:^8.0.2"
checksum: 10c0/95b07e2a409511262d6e29be3d50f2e18ac387ef99664687ab4e92741d1d20fae97309722c37841583b024d1cde1790dd263a9b915d5241751b77f1e8003c418
https-proxy-agent: "npm:^7.0.6"
pac-resolver: "npm:^7.0.1"
socks-proxy-agent: "npm:^8.0.5"
checksum: 10c0/0265c17c9401c2ea735697931a6553a0c6d8b20c4d7d4e3b3a0506080ba69a8d5ad656e2a6be875411212e2b6ed7a4d9526dd3997e08581fdfb1cbcad454c296
languageName: node
linkType: hard

"pac-resolver@npm:^7.0.0":
"pac-resolver@npm:^7.0.1":
version: 7.0.1
resolution: "pac-resolver@npm:7.0.1"
dependencies:
Expand Down Expand Up @@ -12257,19 +12256,19 @@ __metadata:
languageName: node
linkType: hard

"proxy-agent@npm:^6.4.0":
version: 6.4.0
resolution: "proxy-agent@npm:6.4.0"
"proxy-agent@npm:^6.5.0":
version: 6.5.0
resolution: "proxy-agent@npm:6.5.0"
dependencies:
agent-base: "npm:^7.0.2"
agent-base: "npm:^7.1.2"
debug: "npm:^4.3.4"
http-proxy-agent: "npm:^7.0.1"
https-proxy-agent: "npm:^7.0.3"
https-proxy-agent: "npm:^7.0.6"
lru-cache: "npm:^7.14.1"
pac-proxy-agent: "npm:^7.0.1"
pac-proxy-agent: "npm:^7.1.0"
proxy-from-env: "npm:^1.1.0"
socks-proxy-agent: "npm:^8.0.2"
checksum: 10c0/0c5b85cacf67eec9d8add025a5e577b2c895672e4187079ec41b0ee2a6dacd90e69a837936cb3ac141dd92b05b50a325b9bfe86ab0dc3b904011aa3bcf406fc0
socks-proxy-agent: "npm:^8.0.5"
checksum: 10c0/7fd4e6f36bf17098a686d4aee3b8394abfc0b0537c2174ce96b0a4223198b9fafb16576c90108a3fcfc2af0168bd7747152bfa1f58e8fee91d3780e79aab7fd8
languageName: node
linkType: hard

Expand All @@ -12280,6 +12279,13 @@ __metadata:
languageName: node
linkType: hard

"proxy-from-env@npm:^2.1.0":
version: 2.1.0
resolution: "proxy-from-env@npm:2.1.0"
checksum: 10c0/ed01729fd4d094eab619cd7e17ce3698b3413b31eb102c4904f9875e677cd207392795d5b4adee9cec359dfd31c44d5ad7595a3a3ad51c40250e141512281c58
languageName: node
linkType: hard

"pump@npm:^3.0.0":
version: 3.0.0
resolution: "pump@npm:3.0.0"
Expand Down Expand Up @@ -13125,7 +13131,7 @@ __metadata:
languageName: node
linkType: hard

"semver@npm:^7.0.0, semver@npm:^7.1.3, semver@npm:^7.3.2, semver@npm:^7.3.5, semver@npm:^7.5.2, semver@npm:^7.5.4, semver@npm:^7.6.3, semver@npm:^7.7.3, semver@npm:~7.7.4":
"semver@npm:^7.0.0, semver@npm:^7.1.3, semver@npm:^7.3.2, semver@npm:^7.3.5, semver@npm:^7.5.2, semver@npm:^7.5.4, semver@npm:^7.6.3, semver@npm:^7.7.3, semver@npm:^7.7.4, semver@npm:~7.7.4":
version: 7.7.4
resolution: "semver@npm:7.7.4"
bin:
Expand Down Expand Up @@ -13540,7 +13546,7 @@ __metadata:
languageName: node
linkType: hard

"socks-proxy-agent@npm:^8.0.2, socks-proxy-agent@npm:^8.0.3":
"socks-proxy-agent@npm:^8.0.3, socks-proxy-agent@npm:^8.0.5":
version: 8.0.5
resolution: "socks-proxy-agent@npm:8.0.5"
dependencies:
Expand Down Expand Up @@ -14044,9 +14050,9 @@ __metadata:
languageName: node
linkType: hard

"tar-fs@npm:^3.0.6":
version: 3.1.1
resolution: "tar-fs@npm:3.1.1"
"tar-fs@npm:^3.1.1":
version: 3.1.2
resolution: "tar-fs@npm:3.1.2"
dependencies:
bare-fs: "npm:^4.0.1"
bare-path: "npm:^3.0.0"
Expand All @@ -14057,7 +14063,7 @@ __metadata:
optional: true
bare-path:
optional: true
checksum: 10c0/0c677d711c4aa41f94e1a712aa647022ba1910ff84430739e5d9e95a615e3ea1b7112dc93164fc8ce30dc715befcf9cfdc64da27d4e7958d73c59bda06aa0d8e
checksum: 10c0/9dcbbbef9cdfc27f47651fe679f15952a6a8e6b3c9761c4bf3f416ace41cf462fb6292519bd3e041cadfcc0b89043a6bdecb46ff19f770b6864b77dcde7bad46
languageName: node
linkType: hard

Expand Down Expand Up @@ -14154,7 +14160,7 @@ __metadata:
languageName: node
linkType: hard

"through@npm:^2.3.8, through@npm:~2.3.4":
"through@npm:~2.3.4":
version: 2.3.8
resolution: "through@npm:2.3.8"
checksum: 10c0/4b09f3774099de0d4df26d95c5821a62faee32c7e96fb1f4ebd54a2d7c11c57fe88b0a0d49cf375de5fee5ae6bf4eb56dbbf29d07366864e2ee805349970d3cc
Expand Down Expand Up @@ -14445,16 +14451,6 @@ __metadata:
languageName: node
linkType: hard

"unbzip2-stream@npm:^1.4.3":
version: 1.4.3
resolution: "unbzip2-stream@npm:1.4.3"
dependencies:
buffer: "npm:^5.2.1"
through: "npm:^2.3.8"
checksum: 10c0/2ea2048f3c9db3499316ccc1d95ff757017ccb6f46c812d7c42466247e3b863fb178864267482f7f178254214247779daf68e85f50bd7736c3c97ba2d58b910a
languageName: node
linkType: hard

"underscore@npm:^1.12.1":
version: 1.13.8
resolution: "underscore@npm:1.13.8"
Expand Down
Loading