JDSS/mem0
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(mem0-ts): bump adm-zip to >=0.6.1 (CVE-2026-76845)

Browse Source 
0.6.1 is outside the advisory's vulnerable range (>=0.5.9, <=0.6.0) and also fixes HIGH CVE-2026-77301.

Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-medium

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
harshgupta-mem0
2026-09-30 15:32:37 +05:30
co-authored by Claude Opus 5.5
parent 2afcc0653b
commit 7839d5db5d
3 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mem0-ts/package.json
+1 -1
View File
@@ -288,7 +288,7 @@
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0",
"js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0",
"sharp@<0.35.0": ">=0.35.0 <0.36.0",
"adm-zip@<0.6.0": ">=0.6.0 <0.7.0",
"adm-zip@<0.6.1": ">=0.6.1 <0.7.0",
"langsmith@<0.6.0": "^0.6.0",
"minimatch@<3.1.3": "^3.1.3",
"minimatch@>=5.0.0 <5.1.8": "^5.1.8",