From 159874a312b47c9688db8d5995802a7826d0f994 Mon Sep 17 00:00:00 2001 From: anupamme Date: Sat, 1 Aug 2026 09:49:05 +0000 Subject: [PATCH] fix: CVE-2026-45623 security vulnerability Automated dependency upgrade by OrbisAI Security --- package.json | 5 ++++- yarn.lock | 23 ++++++----------------- 2 files changed, 10 insertions(+), 18 deletions(-) diff --git a/package.json b/package.json index 07dab4dff..561c535f8 100644 --- a/package.json +++ b/package.json @@ -157,5 +157,8 @@ "webpack-dev-server": "^6.0.0", "webpack-isomorphic-tools": "^4.0.0" }, - "packageManager": "yarn@4.17.1" + "packageManager": "yarn@4.17.1", + "resolutions": { + "postcss": "8.5.12" + } } diff --git a/yarn.lock b/yarn.lock index b873b730e..a98d6f059 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4711,7 +4711,7 @@ __metadata: languageName: node linkType: hard -"chalk@npm:^2.3.2, chalk@npm:^2.4.1, chalk@npm:^2.4.2": +"chalk@npm:^2.3.2, chalk@npm:^2.4.2": version: 2.4.2 resolution: "chalk@npm:2.4.2" dependencies: @@ -11152,25 +11152,14 @@ __metadata: languageName: node linkType: hard -"postcss@npm:^6.0.1, postcss@npm:^6.0.2": - version: 6.0.23 - resolution: "postcss@npm:6.0.23" - dependencies: - chalk: "npm:^2.4.1" - source-map: "npm:^0.6.1" - supports-color: "npm:^5.4.0" - checksum: 10/218e21b4f42b2147b03c1a8898271629c9fd5b53a08c6e3e1f0f7808bdcaf21a51f0e2040ab32ce92a083f37d07b205f581b2923d6bb6cdcf80cf275ba2b7225 - languageName: node - linkType: hard - -"postcss@npm:^8.4.40": - version: 8.5.8 - resolution: "postcss@npm:8.5.8" +"postcss@npm:8.5.12": + version: 8.5.12 + resolution: "postcss@npm:8.5.12" dependencies: nanoid: "npm:^3.3.11" picocolors: "npm:^1.1.1" source-map-js: "npm:^1.2.1" - checksum: 10/cbacbfd7f767e2c820d4bf09a3a744834dd7d14f69ff08d1f57b1a7defce9ae5efcf31981890d9697a972a64e9965de677932ef28e4c8ba23a87aad45b82c459 + checksum: 10/ec6b79b68c363eca3c8ffceb134a4ab637274aee6ac0857614bf7c18d40ce4ce5f9036edec57b7e0be99895724d2599d0ec7328dbd7f407204e7548697b322f1 languageName: node linkType: hard @@ -13303,7 +13292,7 @@ __metadata: languageName: node linkType: hard -"supports-color@npm:^5.3.0, supports-color@npm:^5.4.0": +"supports-color@npm:^5.3.0": version: 5.5.0 resolution: "supports-color@npm:5.5.0" dependencies: