JDSS/mem0
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(mem0-ts): bump adm-zip to >=0.6.1 (CVE-2026-76845)

Browse Source 
0.6.1 is outside the advisory's vulnerable range (>=0.5.9, <=0.6.0) and also fixes HIGH CVE-2026-77301.

Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-medium

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
harshgupta-mem0
2026-09-30 15:32:37 +05:30
parent 2afcc0653b
commit 7839d5db5d
3 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mem0-ts/package.json
+1 -1
View File
@@ -288,7 +288,7 @@
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0",
"js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0",
"sharp@<0.35.0": ">=0.35.0 <0.36.0",
"adm-zip@<0.6.0": ">=0.6.0 <0.7.0",
"adm-zip@<0.6.1": ">=0.6.1 <0.7.0",
"langsmith@<0.6.0": "^0.6.0",
"minimatch@<3.1.3": "^3.1.3",
"minimatch@>=5.0.0 <5.1.8": "^5.1.8",
mem0-ts/pnpm-lock.yaml
Generated
+6 -6
View File
@@ -12,7 +12,7 @@ overrides:
js-yaml@<3.15.1: '>=3.15.1 <4.0.0'
js-yaml@>=4.0.0 <4.3.1: '>=4.3.1 <5.0.0'
sharp@<0.35.0: '>=0.35.0 <0.36.0'
adm-zip@<0.6.0: '>=0.6.0 <0.7.0'
adm-zip@<0.6.1: '>=0.6.1 <0.7.0'
langsmith@<0.6.0: ^0.6.0
minimatch@<3.1.3: ^3.1.3
minimatch@>=5.0.0 <5.1.8: ^5.1.8
@@ -2009,8 +2009,8 @@ packages:
engines: {node: '>=0.4.0'}
hasBin: true
adm-zip@0.6.0:
resolution: {integrity: sha512-XleryMhbuksdKtofnWZ9Sk+4CUTbms4Mb/EU32SZwToAyZ5RgVos/ki8n+yr0LWHOGKuakbXTuuYNHLQjhddgg==}
adm-zip@0.6.1:
resolution: {integrity: sha512-Xwrja8nx9e5o2N1my4DsKCeKpdrnACyr1wtbPxBDgGzKzKyE9kRtBFA8mWldI+RVlD7CBZNWY/wQ2+ydwOR6kQ==}
engines: {node: '>=14.0'}
afinn-165-financialmarketnews@3.0.0:
@@ -7346,7 +7346,7 @@ snapshots:
acorn@8.16.0: {}
adm-zip@0.6.0: {}
adm-zip@0.6.1: {}
afinn-165-financialmarketnews@3.0.0: {}
@@ -7614,7 +7614,7 @@ snapshots:
cassandra-driver@4.8.0:
dependencies:
'@types/node': 18.19.130
adm-zip: 0.6.0
adm-zip: 0.6.1
long: 5.2.5
chalk-template@0.4.0:
@@ -9291,7 +9291,7 @@ snapshots:
onnxruntime-node@1.24.3:
dependencies:
adm-zip: 0.6.0
adm-zip: 0.6.1
global-agent: 3.0.0
onnxruntime-common: 1.24.3
mem0-ts/pnpm-workspace.yaml
+1 -1
View File
@@ -13,7 +13,7 @@ overrides:
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0"
"js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0"
"sharp@<0.35.0": ">=0.35.0 <0.36.0"
"adm-zip@<0.6.0": ">=0.6.0 <0.7.0"
"adm-zip@<0.6.1": ">=0.6.1 <0.7.0"
"langsmith@<0.6.0": "^0.6.0"
"minimatch@<3.1.3": "^3.1.3"
"minimatch@>=5.0.0 <5.1.8": "^5.1.8"