Skip to content

Commit 9e870b9

Browse files
rajbosCopilot
andcommitted
fix: update uuid to 14.0.0 via overrides to address GHSA-w5hq-g745-h8pq
Add npm overrides in azure-storage-loader to force uuid >= 14.0.0, fixing the missing buffer bounds check vulnerability in v3/v5/v6 (GHSA-w5hq-g745-h8pq, medium severity). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 817758b commit 9e870b9

2 files changed

Lines changed: 11 additions & 4 deletions

File tree

.github/skills/azure-storage-loader/package-lock.json

Lines changed: 8 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/skills/azure-storage-loader/package.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,5 +19,8 @@
1919
"dependencies": {
2020
"@azure/data-tables": "^13.3.2",
2121
"@azure/identity": "^4.13.1"
22+
},
23+
"overrides": {
24+
"uuid": "^14.0.0"
2225
}
2326
}

0 commit comments

Comments
 (0)