From 7839d5db5d76906459a1473d6f309406022da024 Mon Sep 17 00:00:00 2001 From: harshgupta-mem0 Date: Wed, 30 Sep 2026 15:32:37 +0530 Subject: [PATCH] fix(mem0-ts): bump adm-zip to >=0.6.1 (CVE-2026-76845) 0.6.1 is outside the advisory's vulnerable range (>=0.5.9, <=0.6.0) and also fixes HIGH CVE-2026-77301. Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-medium Co-Authored-By: Claude Opus 5.5 --- mem0-ts/package.json | 2 +- mem0-ts/pnpm-lock.yaml | 12 ++++++------ mem0-ts/pnpm-workspace.yaml | 2 +- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/mem0-ts/package.json b/mem0-ts/package.json index 9bd0e5f3a..c34192188 100644 --- a/mem0-ts/package.json +++ b/mem0-ts/package.json @@ -288,7 +288,7 @@ "js-yaml@<3.15.1": ">=3.15.1 <4.0.0", "js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0", "sharp@<0.35.0": ">=0.35.0 <0.36.0", - "adm-zip@<0.6.0": ">=0.6.0 <0.7.0", + "adm-zip@<0.6.1": ">=0.6.1 <0.7.0", "langsmith@<0.6.0": "^0.6.0", "minimatch@<3.1.3": "^3.1.3", "minimatch@>=5.0.0 <5.1.8": "^5.1.8", diff --git a/mem0-ts/pnpm-lock.yaml b/mem0-ts/pnpm-lock.yaml index 727a366fa..27e0811f7 100644 --- a/mem0-ts/pnpm-lock.yaml +++ b/mem0-ts/pnpm-lock.yaml @@ -12,7 +12,7 @@ overrides: js-yaml@<3.15.1: '>=3.15.1 <4.0.0' js-yaml@>=4.0.0 <4.3.1: '>=4.3.1 <5.0.0' sharp@<0.35.0: '>=0.35.0 <0.36.0' - adm-zip@<0.6.0: '>=0.6.0 <0.7.0' + adm-zip@<0.6.1: '>=0.6.1 <0.7.0' langsmith@<0.6.0: ^0.6.0 minimatch@<3.1.3: ^3.1.3 minimatch@>=5.0.0 <5.1.8: ^5.1.8 @@ -2009,8 +2009,8 @@ packages: engines: {node: '>=0.4.0'} hasBin: true - adm-zip@0.6.0: - resolution: {integrity: sha512-XleryMhbuksdKtofnWZ9Sk+4CUTbms4Mb/EU32SZwToAyZ5RgVos/ki8n+yr0LWHOGKuakbXTuuYNHLQjhddgg==} + adm-zip@0.6.1: + resolution: {integrity: sha512-Xwrja8nx9e5o2N1my4DsKCeKpdrnACyr1wtbPxBDgGzKzKyE9kRtBFA8mWldI+RVlD7CBZNWY/wQ2+ydwOR6kQ==} engines: {node: '>=14.0'} afinn-165-financialmarketnews@3.0.0: @@ -7346,7 +7346,7 @@ snapshots: acorn@8.16.0: {} - adm-zip@0.6.0: {} + adm-zip@0.6.1: {} afinn-165-financialmarketnews@3.0.0: {} @@ -7614,7 +7614,7 @@ snapshots: cassandra-driver@4.8.0: dependencies: '@types/node': 18.19.130 - adm-zip: 0.6.0 + adm-zip: 0.6.1 long: 5.2.5 chalk-template@0.4.0: @@ -9291,7 +9291,7 @@ snapshots: onnxruntime-node@1.24.3: dependencies: - adm-zip: 0.6.0 + adm-zip: 0.6.1 global-agent: 3.0.0 onnxruntime-common: 1.24.3 diff --git a/mem0-ts/pnpm-workspace.yaml b/mem0-ts/pnpm-workspace.yaml index 30360a0f0..61017d969 100644 --- a/mem0-ts/pnpm-workspace.yaml +++ b/mem0-ts/pnpm-workspace.yaml @@ -13,7 +13,7 @@ overrides: "js-yaml@<3.15.1": ">=3.15.1 <4.0.0" "js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0" "sharp@<0.35.0": ">=0.35.0 <0.36.0" - "adm-zip@<0.6.0": ">=0.6.0 <0.7.0" + "adm-zip@<0.6.1": ">=0.6.1 <0.7.0" "langsmith@<0.6.0": "^0.6.0" "minimatch@<3.1.3": "^3.1.3" "minimatch@>=5.0.0 <5.1.8": "^5.1.8"