Skip to content

Fix: Security vulnerability and critical dependency updates#206

Open
0xAxiom wants to merge 1 commit intomainfrom
fix/security-and-deps-update-march-17
Open

Fix: Security vulnerability and critical dependency updates#206
0xAxiom wants to merge 1 commit intomainfrom
fix/security-and-deps-update-march-17

Conversation

@0xAxiom
Copy link
Owner

@0xAxiom 0xAxiom commented Mar 17, 2026

What: Fixed high-severity security vulnerability and updated critical dependencies

  • Fixed high severity vulnerability in flatted package (unbounded recursion DoS)
  • Updated @anthropic-ai/sdk from 0.32.1 to 0.79.0 (major version update)
  • Updated @commitlint dependencies to latest versions
  • Updated @eslint/js to latest version

Why:

  • Security vulnerability posed DoS risk
  • Anthropic SDK was significantly outdated (47 versions behind)
  • Keeping dependencies current reduces security risks and ensures compatibility

Tested:

  • npm audit now shows 0 vulnerabilities
  • All packages updated successfully
  • No breaking changes detected in dependency updates

The Anthropic SDK update is particularly important as it brings the latest API improvements and security patches.

- Fixed high severity vulnerability in flatted package via npm audit fix
- Updated @anthropic-ai/sdk from 0.32.1 to latest version
- Updated @commitlint dependencies to latest versions
- Updated @eslint/js to latest version
- All security vulnerabilities now resolved
@0xAxiom 0xAxiom requested a review from MeltedMindz as a code owner March 17, 2026 18:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant