From 2afcc0653b9f8ce5debfbc86fb9af78c087e9602 Mon Sep 17 00:00:00 2001 From: harshgupta-mem0 Date: Wed, 30 Sep 2026 15:32:36 +0530 Subject: [PATCH] fix(mem0-ts): bump ip-address to >=10.5.1 (CVE-2026-101910) Resolves to 10.7.2. Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-medium Co-Authored-By: Claude Opus 5.5 --- mem0-ts/package.json | 2 +- mem0-ts/pnpm-lock.yaml | 10 +++++----- mem0-ts/pnpm-workspace.yaml | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/mem0-ts/package.json b/mem0-ts/package.json index 70c9648a7..9bd0e5f3a 100644 --- a/mem0-ts/package.json +++ b/mem0-ts/package.json @@ -315,7 +315,7 @@ "thrift@<0.23.0": "^0.23.0", "mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0", "protobufjs@<7.6.5": ">=7.6.5 <8.0.0", - "ip-address@<10.3.1": ">=10.3.1 <11.0.0", + "ip-address@<10.5.1": ">=10.5.1 <11.0.0", "browserslist@<4.28.7": ">=4.28.7 <5.0.0", "mysql2@<3.23.1": ">=3.23.1 <4.0.0" } diff --git a/mem0-ts/pnpm-lock.yaml b/mem0-ts/pnpm-lock.yaml index cccbc5093..727a366fa 100644 --- a/mem0-ts/pnpm-lock.yaml +++ b/mem0-ts/pnpm-lock.yaml @@ -39,7 +39,7 @@ overrides: thrift@<0.23.0: ^0.23.0 mongoose@>=9.0.0 <9.7.2: '>=9.7.2 <10.0.0' protobufjs@<7.6.5: '>=7.6.5 <8.0.0' - ip-address@<10.3.1: '>=10.3.1 <11.0.0' + ip-address@<10.5.1: '>=10.5.1 <11.0.0' browserslist@<4.28.7: '>=4.28.7 <5.0.0' mysql2@<3.23.1: '>=3.23.1 <4.0.0' @@ -3034,8 +3034,8 @@ packages: resolution: {integrity: sha512-4rTJX6Q5wTYEvxboXi8DsEiUo+OvqJGtLYOSGm37KpdRXsG5XJjbVtYKGJpPSWP+QT7rWscA4vsrdmzbEbenpw==} engines: {node: '>=18.12.0'} - ip-address@10.4.0: - resolution: {integrity: sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==} + ip-address@10.7.2: + resolution: {integrity: sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==} engines: {node: '>= 12'} is-arrayish@0.2.1: @@ -8435,7 +8435,7 @@ snapshots: transitivePeerDependencies: - supports-color - ip-address@10.4.0: {} + ip-address@10.7.2: {} is-arrayish@0.2.1: {} @@ -9845,7 +9845,7 @@ snapshots: socks@2.8.9: dependencies: - ip-address: 10.4.0 + ip-address: 10.7.2 smart-buffer: 4.2.0 source-map-support@0.5.13: diff --git a/mem0-ts/pnpm-workspace.yaml b/mem0-ts/pnpm-workspace.yaml index 514203e2b..30360a0f0 100644 --- a/mem0-ts/pnpm-workspace.yaml +++ b/mem0-ts/pnpm-workspace.yaml @@ -37,7 +37,7 @@ overrides: "thrift@<0.23.0": "^0.23.0" "mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0" "protobufjs@<7.6.5": ">=7.6.5 <8.0.0" - "ip-address@<10.3.1": ">=10.3.1 <11.0.0" + "ip-address@<10.5.1": ">=10.5.1 <11.0.0" "browserslist@<4.28.7": ">=4.28.7 <5.0.0" "mysql2@<3.23.1": ">=3.23.1 <4.0.0"