mirror of
https://gitee.com/pnoker/iot-dc3.git
synced 2026-11-01 18:51:53 +08:00
- VulnerabilitiesID: pnpm update postcss/brace-expansion (transitive) — dc3-web: postcss 8.5.19+/8.5.25, brace-expansion 2.1.4/5.0.9 (CVE path-traversal / DoS); docs: postcss 8.5.25 - SecurityPolicyID: SECURITY.md add GitHub Security Advisory (private vulnerability reporting) link as preferred channel Fixes 4 dependabot alerts (PostCSS ×2, brace-expansion ×2).