Skip to content

Commit 0e73fc3

Browse files
fix: update picomatch to 4.0.4 to address CVE-2026-33671 ReDoS vulnerability
Ticket: CGARD-454
1 parent 2f5bda0 commit 0e73fc3

2 files changed

Lines changed: 6 additions & 10 deletions

File tree

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -122,7 +122,8 @@
122122
"@isaacs/brace-expansion": "5.0.1",
123123
"basic-ftp": ">=5.2.0",
124124
"flatted": "3.4.2",
125-
"sjcl": "npm:@bitgo/sjcl@1.0.1"
125+
"sjcl": "npm:@bitgo/sjcl@1.0.1",
126+
"picomatch": ">=2.3.2"
126127
},
127128
"workspaces": [
128129
"modules/*"

yarn.lock

Lines changed: 4 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -16784,15 +16784,10 @@ picocolors@1.1.1, picocolors@^1.0.0, picocolors@^1.1.1:
1678416784
resolved "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz"
1678516785
integrity sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==
1678616786

16787-
picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.3.1:
16788-
version "2.3.1"
16789-
resolved "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz"
16790-
integrity sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==
16791-
16792-
picomatch@^4.0.2, picomatch@^4.0.3:
16793-
version "4.0.3"
16794-
resolved "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz"
16795-
integrity sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==
16787+
picomatch@>=2.3.2, picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.3.1, picomatch@^4.0.2, picomatch@^4.0.3:
16788+
version "4.0.4"
16789+
resolved "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz#fd6f5e00a143086e074dffe4c924b8fb293b0589"
16790+
integrity sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==
1679616791

1679716792
pidtree@^0.5.0:
1679816793
version "0.5.0"

0 commit comments

Comments
 (0)