AOSSIE-Org / AOSSIE-Org/BabyNest
## 🔒 Security Vulnerability Fix
- Linguagem predominante
- JavaScript
- Estrelas
- 56
- Forks
- 123
- Métricas de merge de PRs
- Nenhum PR com merge em 30d
Descrição
**Issue:** Dependencies have multiple security vulnerabilities
**Severity:** Critical/High
**Status:** ✅ Resolved
### Vulnerabilities Found
- Total: 50 vulnerabilities
- 6 Critical
- 19 High
- 19 Moderate
- 6 Low
### Packages Updated
| Package | Old Version | New Version |
|---------|-------------|-------------|
| @babel/runtime | ^7.25.0 | ^7.26.10 |
| expo | ^52.0.0 | ^53.0.0 |
| expo-font | ^13.0.3 | latest |
| react-navigation | ^4.4.4 | Removed (deprecated) |
| react-navigation-bottom-tabs | ^1.0.2 | Removed (deprecated) |
### Vulnerabilities Fixed
- axios DoS vulnerability
- form-data unsafe random function
- js-yaml prototype pollution
- lodash prototype pollution
- minimatch ReDoS
- brace-expansion ReDoS
- fast-xml-parser entity encoding bypass
- image-size DoS
- tar arbitrary file overwrite
- And 40+ more transitive vulnerabilities
### Remaining Vulnerabilities
- 2 moderate (markdown-it - no fix available, requires replacing react-native-markdown-display)
### Testing
- ✅ App builds successfully
- ✅ No breaking changes
### PR: #195
Branch: fix/dependency-security-updates
Guia de contribuição
Nenhum guia de contribuição indexado para este repositório
Avaliação
Esta issue ainda não foi avaliada.