From 10f72fea820fe9aecd63751b60b40ce5a4b7723a Mon Sep 17 00:00:00 2001 From: cursoragent Date: Thu, 13 Aug 2026 17:28:49 +0000 Subject: [PATCH] chore(deps): bump nanoid to 3.3.18 to resolve osv-scan CVE GHSA-2v37-7h3g-55p8 was disclosed against nanoid 3.3.17 (CVSS 8.2), breaking osv-scan on every PR. nanoid is a transitive dep of postcss, so this is a lock-only bump; package.json is unchanged. Verified locally with osv-scanner v2.3.8 (No issues found). Co-authored-by: Krrish Dholakia --- ui/litellm-dashboard/package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ui/litellm-dashboard/package-lock.json b/ui/litellm-dashboard/package-lock.json index 515a992bc85..b36b07631e3 100644 --- a/ui/litellm-dashboard/package-lock.json +++ b/ui/litellm-dashboard/package-lock.json @@ -10319,9 +10319,9 @@ "license": "MIT" }, "node_modules/nanoid": { - "version": "3.3.17", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz", - "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==", + "version": "3.3.18", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", + "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", "funding": [ { "type": "github",