Skip to content

Commit c2edf68

Browse files
Sachin Hulyalkarsachinh-amazon
authored andcommitted
fix: Override undici and ws to fix CVE-2026-6734, CVE-2026-9697, CVE-2026-12151, CVE-2026-48779
- undici: ^7.24.0 → ^7.28.0 (CVE-2026-6734, CVE-2026-9697, CVE-2026-12151) - ws: ^7.5.11 global override (CVE-2026-48779) Regenerated package-lock overrides for all targets.
1 parent 406cee4 commit c2edf68

13 files changed

Lines changed: 211 additions & 96 deletions

File tree

package-lock-overrides/sagemaker.series/package-lock.json

Lines changed: 29 additions & 28 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package-lock-overrides/sagemaker.series/remote/package-lock.json

Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package-lock-overrides/web-embedded.series/package-lock.json

Lines changed: 29 additions & 28 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package-lock-overrides/web-embedded.series/remote/package-lock.json

Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package-lock-overrides/web-server.series/package-lock.json

Lines changed: 29 additions & 28 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package-lock-overrides/web-server.series/remote/package-lock.json

Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
Override tar to ^7.5.16 to fix CVE-2026-53655.
2+
3+
@generated
4+
@generator: scripts/patches/apply-override.sh --patch common/finding-override-tar.diff --override 'direct-dev:tar=^7.5.16' --override 'global:tar=^7.5.16'
5+
@override-package: tar@^7.5.16
6+
7+
Index: b/package.json
8+
===================================================================
9+
--- a/package.json
10+
+++ b/package.json
11+
@@ -210,7 +210,7 @@
12+
"source-map": "0.6.1",
13+
"source-map-support": "^0.3.2",
14+
"style-loader": "^3.3.2",
15+
- "tar": "^7.5.10",
16+
+ "tar": "^7.5.16",
17+
"ts-loader": "^9.5.1",
18+
"tsec": "0.2.7",
19+
"tslib": "^2.6.3",
20+
@@ -246,7 +246,8 @@
21+
"ip-address": "^10.1.1",
22+
"shell-quote": "^1.8.4",
23+
"undici": "^7.28.0",
24+
- "ws": "^7.5.11"
25+
+ "ws": "^7.5.11",
26+
+ "tar": "^7.5.16"
27+
},
28+
"repository": {
29+
"type": "git",

0 commit comments

Comments
 (0)