From b960061538ac6ee6017145b7e673bc2c66876384 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Tue, 20 Oct 2026 03:01:59 +0000 Subject: [PATCH] fix(dev-server-ui): update dompurify and uuid for security advisories Update the transitive dompurify from 3.2.4 to 3.4.16 in the lockfile. Add a scoped npm override that sets uuid to 11.1.1 for launchdarkly-js-sdk-common. This is the focused security part of #779. Co-authored-by: rniebla --- internal/dev_server/ui/package-lock.json | 19 ++++++++++++------- internal/dev_server/ui/package.json | 5 ++++- 2 files changed, 16 insertions(+), 8 deletions(-) diff --git a/internal/dev_server/ui/package-lock.json b/internal/dev_server/ui/package-lock.json index b2c10d58..30162117 100644 --- a/internal/dev_server/ui/package-lock.json +++ b/internal/dev_server/ui/package-lock.json @@ -5740,9 +5740,9 @@ "peer": true }, "node_modules/dompurify": { - "version": "3.2.4", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.4.tgz", - "integrity": "sha512-ysFSFEDVduQpyhzAob/kkuJjf5zWkZD8/A9ywSp1byueyuCfHamrCBa14/Oc2iiB0e51B+NpxSl5gmzn+Ms/mg==", + "version": "3.4.16", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz", + "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==", "license": "(MPL-2.0 OR Apache-2.0)", "optionalDependencies": { "@types/trusted-types": "^2.0.7" @@ -9782,11 +9782,16 @@ } }, "node_modules/uuid": { - "version": "8.3.2", - "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz", - "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==", + "version": "11.1.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz", + "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==", + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], + "license": "MIT", "bin": { - "uuid": "dist/bin/uuid" + "uuid": "dist/esm/bin/uuid" } }, "node_modules/vite": { diff --git a/internal/dev_server/ui/package.json b/internal/dev_server/ui/package.json index 92ee9a1b..a8f7ddad 100644 --- a/internal/dev_server/ui/package.json +++ b/internal/dev_server/ui/package.json @@ -49,6 +49,9 @@ }, "overrides": { "react-router-dom": "6.30.1", - "@remix-run/router": "1.23.3" + "@remix-run/router": "1.23.3", + "launchdarkly-js-sdk-common": { + "uuid": "11.1.1" + } } }