From dbd8281d0b92b31785b0bc72544f5ae2787dc19d Mon Sep 17 00:00:00 2001 From: anupamme Date: Thu, 30 Jul 2026 03:52:21 +0000 Subject: [PATCH] fix: CVE-2025-9287 security vulnerability Automated dependency upgrade by OrbisAI Security --- package-lock.json | 14 +++++++++----- package.json | 1 + 2 files changed, 10 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 21357ef5c..d0215b9aa 100644 --- a/package-lock.json +++ b/package-lock.json @@ -21,6 +21,7 @@ "bump-regex": "4.1.0", "chroma-js": "^3.1.2", "chrono-node": "^2.7.7", + "cipher-base": "^1.0.5", "clipboardy": "3.0.0", "columnify": "^1.6.0", "commander": "^8.1.0", @@ -9125,13 +9126,16 @@ } }, "node_modules/cipher-base": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.4.tgz", - "integrity": "sha512-Kkht5ye6ZGmwv40uUDZztayT2ThLQGfnj/T71N/XzeZeo3nf8foyW7zGTsPYkEya3m5f3cAypH+qe7YOrM1U2Q==", + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.5.tgz", + "integrity": "sha512-xq7ICKB4TMHUx7Tz1L9O2SGKOhYMOTR32oir45Bq28/AQTpHogKgHcoYFSdRbMtddl+ozNXfXY9jWcgYKmde0w==", "license": "MIT", "dependencies": { - "inherits": "^2.0.1", - "safe-buffer": "^5.0.1" + "inherits": "^2.0.4", + "safe-buffer": "^5.2.1" + }, + "engines": { + "node": ">= 0.10" } }, "node_modules/cjs-module-lexer": { diff --git a/package.json b/package.json index 150e806fd..2b520af0f 100644 --- a/package.json +++ b/package.json @@ -163,6 +163,7 @@ "bump-regex": "4.1.0", "chroma-js": "^3.1.2", "chrono-node": "^2.7.7", + "cipher-base": "^1.0.5", "clipboardy": "3.0.0", "columnify": "^1.6.0", "commander": "^8.1.0",