Files
cline/docs/package.json
T
James ArlenandTheRealSpencer ba314d0543 security(docs): adm-zip 0.6.1, fast-uri 3.1.8, js-yaml 4.3.2 overrides in docs tooling (#14518)
* security(docs): override adm-zip >=0.6.1 and fast-uri >=3.1.6 in docs tooling

Closes CVE-2026-77301 (adm-zip) and CVE-2026-75899/-75931/-75975/-76172 (fast-uri),
all on docs/package-lock.json via mintlify. Resolved: adm-zip 0.6.1, fast-uri 3.1.8.

Produced by the VMP Automation, 2026-09-25 run.

* security(docs): raise js-yaml override floor to >=4.3.2 <5

The ^4.3.1 override resolved the vulnerable 4.3.1 in docs/ (CVE-2026-84375, Dependabot #699).

Produced by the VMP Automation, 2026-09-25 run.

---------

Co-authored-by: TheRealSpencer <32678829+TheRealSpencer@users.noreply.github.com>
2026-09-28 13:46:21 +09:00

34 lines
743 B
JSON

{
"name": "docs",
"version": "1.0.0",
"main": "index.js",
"scripts": {
"test": "echo \"Error: no test specified\" && exit 1",
"dev": "mintlify dev",
"check": "mintlify broken-links",
"rename": "mintlify rename"
},
"keywords": [],
"author": "",
"license": "ISC",
"description": "",
"dependencies": {
"mintlify": "^4.2.338"
},
"overrides": {
"tar-fs": "^3.1.1",
"js-yaml": ">=4.3.2 <5",
"tar": ">=7.5.21",
"body-parser@<1.20.6": "1.20.6",
"axios@<1.18.0": "1.18.0",
"qs": ">=6.15.2",
"express@<=4.20.0": "4.20.0",
"serve-static@<=1.16.0": "1.16.0",
"send@<=0.19.0": "0.19.0",
"path-to-regexp@<=0.1.12": "0.1.12",
"cookie@<=0.7.0": "0.7.0",
"adm-zip": ">=0.6.1 <0.7",
"fast-uri": ">=3.1.6 <4"
}
}