From cb5b1ea88d9936d3c43c0dd3e1bd099db3783824 Mon Sep 17 00:00:00 2001 From: Sunny Sethi Date: Fri, 17 Jul 2026 14:13:25 +0530 Subject: [PATCH] =?UTF-8?q?fix(security):=20bump=20websocket-driver=200.7.?= =?UTF-8?q?4=20=E2=86=92=200.7.5=20(GHSA-xv26-6w52-cph6)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fixes message corruption vulnerability via abuse of protocol length headers. Added npm override to prevent regression on lockfile regeneration. AXE-3847 Co-Authored-By: Claude Opus 4.6 (1M context) --- package-lock.json | 14 +++++++------- package.json | 3 ++- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 21782ef2..27a48024 100644 --- a/package-lock.json +++ b/package-lock.json @@ -13606,9 +13606,9 @@ } }, "node_modules/websocket-driver": { - "version": "0.7.4", - "resolved": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.4.tgz", - "integrity": "sha512-b17KeDIQVjvb0ssuSDF2cYXSg2iztliJ4B9WdsuB6J952qCPKmnVq4DyW5motImXHDC1cBT/1UezrJVsKw5zjg==", + "version": "0.7.5", + "resolved": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.5.tgz", + "integrity": "sha512-ZL2+3c7kMBdIRCMz6l8jQMHyGVxj+UL+xVk74Ombiciboca8rHa15L86B19E5oh1pL9Ii/uj54gtsIrZGMo6zA==", "dev": true, "dependencies": { "http-parser-js": ">=0.5.1", @@ -18303,7 +18303,7 @@ "integrity": "sha512-Xhj93RXbMSq8urNCUq4p9l0P6hnySJ/7YNRhYNug0bLOuii7pKO7xQFb5mx9xZXWCar88pLPb805PvUkwrLZpQ==", "dev": true, "requires": { - "websocket-driver": ">=0.5.1" + "websocket-driver": ">=0.7.5" } }, "fd-slicer": { @@ -23812,9 +23812,9 @@ "dev": true }, "websocket-driver": { - "version": "0.7.4", - "resolved": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.4.tgz", - "integrity": "sha512-b17KeDIQVjvb0ssuSDF2cYXSg2iztliJ4B9WdsuB6J952qCPKmnVq4DyW5motImXHDC1cBT/1UezrJVsKw5zjg==", + "version": "0.7.5", + "resolved": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.5.tgz", + "integrity": "sha512-ZL2+3c7kMBdIRCMz6l8jQMHyGVxj+UL+xVk74Ombiciboca8rHa15L86B19E5oh1pL9Ii/uj54gtsIrZGMo6zA==", "dev": true, "requires": { "http-parser-js": ">=0.5.1", diff --git a/package.json b/package.json index 046ddad9..4f6881f7 100644 --- a/package.json +++ b/package.json @@ -203,6 +203,7 @@ }, "overrides": { "lodash": "4.18.1", - "ws": ">=8.21.0" + "ws": ">=8.21.0", + "websocket-driver": ">=0.7.5" } }