opensource/cline
3
0
Fork 0
mirror of https://github.com/cline/cline.git synced 2026-10-25 10:26:36 +08:00
Code Issues Packages Projects Releases Wiki Activity

security: raise js-yaml floor to 4.3.2 (CVE-2026-84375, T1 in rule/skill frontmatter loader) (#14032)

Browse Source 
bun.lock: js-yaml@4.3.1 -> 4.3.2 (the vulnerable entry is deleted, not just overridden).
Root override becomes a plain top-level key ">=4.3.2 <5" per the bun-1.3 rule; apps/vscode
floor ^4.3.2. Closes 2 findings on cline (CVE-2026-84375, AIKIDO-2026-641142).

Produced by the VMP Automation, 2026-09-10 run

Co-authored-by: TheRealSpencer <32678829+TheRealSpencer@users.noreply.github.com>
This commit is contained in:
James Arlen
2026-09-23 23:53:14 +02:00
committed by GitHub
co-authored by TheRealSpencer
parent ff5f00974b
commit bb203d435c
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/vscode/package.json
+1 -1
View File
@@ -512,7 +512,7 @@
"ignore": "^7.0.3",
"image-size": "^2.0.2",
"isbinaryfile": "^5.0.2",
"js-yaml": "^4.1.1",
"js-yaml": "^4.3.2",
"jschardet": "^3.1.4",
"json5": "^2.2.3",
"jwt-decode": "^4.0.0",
bun.lock
+3 -3
View File
@@ -415,7 +415,7 @@
"ignore": "^7.0.3",
"image-size": "^2.0.2",
"isbinaryfile": "^5.0.2",
"js-yaml": "^4.1.1",
"js-yaml": "^4.3.2",
"jschardet": "^3.1.4",
"json5": "^2.2.3",
"jwt-decode": "^4.0.0",
@@ -824,7 +824,7 @@
"axios": "1.18.0",
"diff": "8.0.4",
"fast-uri": ">=3.1.4",
"js-yaml": "^4.1.1",
"js-yaml": ">=4.3.2 <5",
"mermaid": "11.16.1",
"protobufjs": "7.6.5",
"serialize-javascript": ">=7.0.3",
@@ -3803,7 +3803,7 @@
"js-tokens": ["js-tokens@10.0.0", "", {}, "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q=="],
"js-yaml": ["js-yaml@4.3.1", "", { "dependencies": { "argparse": "^2.0.1" }, "bin": { "js-yaml": "bin/js-yaml.js" } }, "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ=="],
"js-yaml": ["js-yaml@4.3.2", "", { "dependencies": { "argparse": "^2.0.1" }, "bin": { "js-yaml": "bin/js-yaml.js" } }, "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA=="],
"jschardet": ["jschardet@3.1.4", "", {}, "sha512-/kmVISmrwVwtyYU40iQUOp3SUPk2dhNCMsZBQX0R1/jZ8maaXJ/oZIzUOiyOqcgtLnETFKYChbJ5iDC/eWmFHg=="],
package.json
+1 -1
View File
@@ -73,7 +73,7 @@
"@opentui/react": "0.4.3",
"tar-fs": ">=3.1.1",
"tar": "^7.5.2",
"js-yaml": "^4.1.1",
"js-yaml": ">=4.3.2 <5",
"serialize-javascript": ">=7.0.3",
"protobufjs": "7.6.5",
"mermaid": "11.16.1",