agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-11-12 13:13:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

[Security upgrade] bump adm-zip to 0.6.0 in tools/saas-e2e and server-ce/test (#35608)

Browse Source 
Fixes GHSA-xcpc-8h2w-3j85 / CVE-2026-39244 (high): a crafted ZIP archive
declaring a huge uncompressed size could force an unbounded Buffer.alloc
and OOM the process.

adm-zip 0.6.0 ships built-in TypeScript types, so @types/adm-zip is
dropped from both workspaces' devDependencies to avoid duplicate/
conflicting type declarations.

GitOrigin-RevId: dffc1c38a10f42d09c799ae768f1ffcfc0e09328
This commit is contained in:
Lucie Germain
2026-09-17 11:34:07 +00:00
committed by Copybot
parent a22f4ad1c5
commit 2dee2b31d9
1 changed files with 6 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
yarn.lock
+6 -17
View File
@@ -7232,9 +7232,8 @@ __metadata:
"@cypress/grep": "npm:^6.0.2" "@cypress/grep": "npm:^6.0.2"
"@isomorphic-git/lightning-fs": "npm:^4.6.0" "@isomorphic-git/lightning-fs": "npm:^4.6.0"
"@testing-library/cypress": "npm:^10.1.0" "@testing-library/cypress": "npm:^10.1.0"
"@types/adm-zip": "npm:^0.5.7"
"@types/uuid": "npm:^9.0.8" "@types/uuid": "npm:^9.0.8"
adm-zip: "npm:^0.5.12" adm-zip: "npm:^0.6.0"
cypress: "npm:15.12.0" cypress: "npm:15.12.0"
cypress-multi-reporters: "npm:^2.0.5" cypress-multi-reporters: "npm:^2.0.5"
isomorphic-git: "npm:^1.33.1" isomorphic-git: "npm:^1.33.1"
@@ -7255,9 +7254,8 @@ __metadata:
"@overleaf/promise-utils": "workspace:*" "@overleaf/promise-utils": "workspace:*"
"@overleaf/validation-tools": "workspace:*" "@overleaf/validation-tools": "workspace:*"
"@testing-library/cypress": "npm:10.1.0" "@testing-library/cypress": "npm:10.1.0"
"@types/adm-zip": "npm:^0.5.7"
"@types/uuid": "npm:^9.0.8" "@types/uuid": "npm:^9.0.8"
adm-zip: "npm:^0.5.12" adm-zip: "npm:^0.6.0"
cypress: "npm:15.12.0" cypress: "npm:15.12.0"
cypress-multi-reporters: "npm:^2.0.5" cypress-multi-reporters: "npm:^2.0.5"
express: "npm:4.22.1" express: "npm:4.22.1"
@@ -9975,15 +9973,6 @@ __metadata:
languageName: node languageName: node
linkType: hard linkType: hard
"@types/adm-zip@npm:^0.5.7":
version: 0.5.8
resolution: "@types/adm-zip@npm:0.5.8"
dependencies:
"@types/node": "npm:*"
checksum: 10c0/64d0f3a3e8c1546a7a6685726b3342100a4329e530e643b06107919668688b21db717aa35bf0df11454dce6f63968b6f412482de8a4dd2466664b19289f660f7
languageName: node
linkType: hard
"@types/algoliasearch@npm:^3.34.11": "@types/algoliasearch@npm:^3.34.11":
version: 3.34.11 version: 3.34.11
resolution: "@types/algoliasearch@npm:3.34.11" resolution: "@types/algoliasearch@npm:3.34.11"
@@ -12182,10 +12171,10 @@ __metadata:
languageName: node languageName: node
linkType: hard linkType: hard
"adm-zip@npm:^0.5.12": "adm-zip@npm:^0.6.0":
version: 0.5.17 version: 0.6.0
resolution: "adm-zip@npm:0.5.17" resolution: "adm-zip@npm:0.6.0"
checksum: 10c0/29b8f2a1070fc540ad9a45b13d0ceffd141d78e5a4501f102e978f0256f8290326009ccd3411213e90f3a810c830b39453548638879b3295ddc3814c20a8307b checksum: 10c0/440f37590c62255226f1db4cb1a5a618879347f5106ad5b9a24c67c20f9a54bd5b4efcd2b35af858e39c7885d05f4bd35f4c2f42378c98d13f779be380bc9ae4
languageName: node languageName: node
linkType: hard linkType: hard