scriptoriumadmin/GitNexus
1
0
Fork 0
mirror of https://github.com/abhigyanpatwari/GitNexus.git synced 2026-08-28 05:25:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

fix(deps): override adm-zip >=0.6.0 to remediate memory allocation vulnerability (#2992)

Browse source 
Remediates GHSA-xcpc-8h2w-3j85 (DoS via crafted ZIP file 4GB memory allocation in onnxruntime-node).

Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
This commit is contained in:
nerdCopter 2026-08-18 23:22:42 -05:00 • committed by GitHub
parent b77d6f662b
commit e4b8a48042
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
gitnexus/package-lock.json generated
View file

@ -2151,13 +2151,13 @@
}
},
"node_modules/adm-zip": {
"version": "0.5.16",
"resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.5.16.tgz",
"integrity": "sha512-TGw5yVi4saajsSEgz25grObGHEUaDrniwvA2qwSC060KfqGPdglhvPMA2lPIoxs3PQIItj2iag35fONcQqgUaQ==",
"version": "0.6.0",
"resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.6.0.tgz",
"integrity": "sha512-XleryMhbuksdKtofnWZ9Sk+4CUTbms4Mb/EU32SZwToAyZ5RgVos/ki8n+yr0LWHOGKuakbXTuuYNHLQjhddgg==",
"license": "MIT",
"optional": true,
"engines": {
"node": ">=12.0"
"node": ">=14.0"
}
},
"node_modules/ajv": {

1
gitnexus/package.json
View file

@ -120,6 +120,7 @@
"vitest": "^4.0.18"
},
"overrides": {
"adm-zip": ">=0.6.0",
"@huggingface/transformers": {
"onnxruntime-node": "$onnxruntime-node"
}