i/next-ai-draw-io
1
0
Fork 0
mirror of https://github.com/DayuanJiang/next-ai-draw-io.git synced 2026-09-08 12:20:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: upgrade wrangler to ^4.60.0 to address CVE-2026-0933 (#628)

Browse Source 
Upgrade wrangler from 4.58.0 to ^4.60.0 to fix the command injection
vulnerability (CWE-78) in the --commit-hash parameter of wrangler pages
deploy command.

Fixes #627
This commit is contained in:
Dayuan Jiang
2026-01-23 08:38:07 +09:00
committed by GitHub
parent 0baa424bc4
commit dc37ce7fb1
2 changed files with 91 additions and 587 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package-lock.json
Generated
+90 -586
View File
File diff suppressed because it is too large Load Diff
package.json
+1 -1
View File
@@ -139,7 +139,7 @@
"vite-tsconfig-paths": "^6.0.3", "vite-tsconfig-paths": "^6.0.3",
"vitest": "^4.0.16", "vitest": "^4.0.16",
"wait-on": "^9.0.3", "wait-on": "^9.0.3",
"wrangler": "4.58.0" "wrangler": "^4.60.0"
}, },
"overrides": { "overrides": {
"@openrouter/ai-sdk-provider": { "@openrouter/ai-sdk-provider": {