github-featured / comet-ml--opik

发布

0 发布 8,340 Git 标签

RSS 订阅源
  • 1.10.6-4122 637c79e3fb
    比较

    fix: resolve tar-fs CVE-2025-59343 by upgrading react-pdf to v10 (#5088)

    frostbyte_neo 发布于 2026-02-05 12:15:23 +00:00

    • Upgrade react-pdf from 9.2.1 to 10.3.0
    • Switches from canvas to @napi-rs/canvas (zero dependencies)
    • Completely eliminates tar-fs from dependency tree
    • Fixes HIGH severity symlink validation bypass vulnerability
    • Resolves Dependabot alert #120

    Refs: OPIK-4252

    下载附件