From a974b333fe3d1fe460be9b4719bbdde97eb9e56b Mon Sep 17 00:00:00 2001 From: anupamme Date: Fri, 18 Sep 2026 16:44:54 +0000 Subject: [PATCH 1/2] fix: CVE-2026-27699 security vulnerability Automated dependency upgrade by OrbisAI Security --- libGenerator/package-lock.json | 6 +++--- libGenerator/package.json | 23 +++++++++++++++++++++++ 2 files changed, 26 insertions(+), 3 deletions(-) diff --git a/libGenerator/package-lock.json b/libGenerator/package-lock.json index c3c3954..fb54bf9 100644 --- a/libGenerator/package-lock.json +++ b/libGenerator/package-lock.json @@ -656,9 +656,9 @@ } }, "node_modules/basic-ftp": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/basic-ftp/-/basic-ftp-5.1.0.tgz", - "integrity": "sha512-RkaJzeJKDbaDWTIPiJwubyljaEPwpVWkm9Rt5h9Nd6h7tEXTJ3VB4qxdZBioV7JO5yLUaOKwz7vDOzlncUsegw==", + "version": "5.3.1", + "resolved": "https://registry.npmjs.org/basic-ftp/-/basic-ftp-5.3.1.tgz", + "integrity": "sha512-bopVNp6ugyA150DDuZfPFdt1KZ5a94ZDiwX4hMgZDzF+GttD80lEy8kj98kbyhLXnPvhtIo93mdnLIjpCAeeOw==", "license": "MIT", "engines": { "node": ">=10.0.0" diff --git a/libGenerator/package.json b/libGenerator/package.json index 5aa4203..b8b6135 100644 --- a/libGenerator/package.json +++ b/libGenerator/package.json @@ -14,5 +14,28 @@ "image-thumbnail": "^1.0.17", "puppeteer": "^24.34.0", "uglify-js": "^3.15.3" + }, + "overrides": { + "@puppeteer/browsers": { + "basic-ftp": "5.3.1" + }, + "basic-ftp": { + "basic-ftp": "5.3.1" + }, + "get-uri": { + "basic-ftp": "5.3.1" + }, + "pac-proxy-agent": { + "basic-ftp": "5.3.1" + }, + "proxy-agent": { + "basic-ftp": "5.3.1" + }, + "puppeteer": { + "basic-ftp": "5.3.1" + }, + "puppeteer-core": { + "basic-ftp": "5.3.1" + } } } From 3af4a1d0d45c87dc28c58f9d716b942f7490f6b8 Mon Sep 17 00:00:00 2001 From: OrbisAI Security Date: Sat, 19 Sep 2026 07:02:43 +0530 Subject: [PATCH 2/2] fix: simplify basic-ftp override to single top-level entry The lockfile shows only get-uri depends on basic-ftp; the other five parent-scoped overrides were unnecessary. Co-Authored-By: Claude Sonnet 5 --- libGenerator/package.json | 22 +--------------------- 1 file changed, 1 insertion(+), 21 deletions(-) diff --git a/libGenerator/package.json b/libGenerator/package.json index b8b6135..3c1cf1f 100644 --- a/libGenerator/package.json +++ b/libGenerator/package.json @@ -16,26 +16,6 @@ "uglify-js": "^3.15.3" }, "overrides": { - "@puppeteer/browsers": { - "basic-ftp": "5.3.1" - }, - "basic-ftp": { - "basic-ftp": "5.3.1" - }, - "get-uri": { - "basic-ftp": "5.3.1" - }, - "pac-proxy-agent": { - "basic-ftp": "5.3.1" - }, - "proxy-agent": { - "basic-ftp": "5.3.1" - }, - "puppeteer": { - "basic-ftp": "5.3.1" - }, - "puppeteer-core": { - "basic-ftp": "5.3.1" - } + "basic-ftp": "5.3.1" } }