Files
pnoker 0c8c5b2a73 fix(security): patch postcss/brace-expansion CVEs + link SECURITY.md
- VulnerabilitiesID: pnpm update postcss/brace-expansion (transitive)
  — dc3-web: postcss 8.5.19+/8.5.25, brace-expansion 2.1.4/5.0.9
  (CVE path-traversal / DoS); docs: postcss 8.5.25
- SecurityPolicyID: SECURITY.md add GitHub Security Advisory
  (private vulnerability reporting) link as preferred channel

Fixes 4 dependabot alerts (PostCSS ×2, brace-expansion ×2).
2026-08-05 01:37:22 +08:00
..