github-featured / opendataloader-project--opendataloader-pdf

发布

0 发布 77 Git 标签

RSS 订阅源
  • v1.11.3 d0ba3b148d
    比较

    chore: fix high-severity minimatch ReDoS and update dependencies

    frostbyte_neo 发布于 2026-03-04 07:38:27 +00:00

    Fix two high-severity Dependabot alerts for minimatch ReDoS (CVEs #14, #15):

    • Update pnpm override from <10.2.1 to <10.2.3 (patched version is 10.2.3)
    • minimatch is now resolved to 10.2.4

    Also update other dependencies:

    • Node.js: @types/node, @typescript-eslint/*, eslint, globals (minor/patch)
    • Java: commons-cli 1.10.0 → 1.11.0
    • Python: python-multipart minimum version >=0.0.6 → >=0.0.22 (security patch)

    Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

    下载附件