Skip to content

Commit b7e2f7b

Browse files
fix: update brace-expansion to resolve CVE-2026-13149 (#188)
Add npm overrides to force brace-expansion >= 1.1.16, resolving DoS vulnerability via exponential-time expansion of consecutive non-expanding {} groups. Co-authored-by: Oz <oz-agent@warp.dev>
1 parent 19c7d50 commit b7e2f7b

2 files changed

Lines changed: 27 additions & 30 deletions

File tree

build_ts/package-lock.json

Lines changed: 24 additions & 30 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

build_ts/package.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,9 @@
1010
},
1111
"author": "Warp Team (eng@warp.dev)",
1212
"license": "MIT",
13+
"overrides": {
14+
"brace-expansion": ">=1.1.16"
15+
},
1316
"devDependencies": {
1417
"@types/webpack-env": "^1.16.3",
1518
"json-loader": "^0.5.7",

0 commit comments

Comments
 (0)