i/next-ai-draw-io
1
0
Fork 0
mirror of https://github.com/DayuanJiang/next-ai-draw-io.git synced 2026-09-01 17:10:24 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: upgrade wrangler to ^4.60.0 to address CVE-2026-0933 (#628)

Browse Source 
Upgrade wrangler from 4.58.0 to ^4.60.0 to fix the command injection
vulnerability (CWE-78) in the --commit-hash parameter of wrangler pages
deploy command.

Fixes #627
This commit is contained in:
Dayuan Jiang
2026-01-23 08:38:07 +09:00
committed by GitHub
parent 0baa424bc4
commit dc37ce7fb1
2 changed files with 91 additions and 587 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package.json
View File

@@ -139,7 +139,7 @@
"vite-tsconfig-paths": "^6.0.3",
"vitest": "^4.0.16",
"wait-on": "^9.0.3",
"wrangler": "4.58.0"
"wrangler": "^4.60.0"
},
"overrides": {
"@openrouter/ai-sdk-provider": {