From abb81c88e1f738a8117d8293530fbc31a5ef8fd9 Mon Sep 17 00:00:00 2001 From: Harsh Vardhan Gupta Date: Thu, 1 Oct 2026 21:46:18 +0530 Subject: [PATCH] fix(security): resolve 7 Vanta MEDIUM Dependabot vulnerabilities (undici, ip-address, adm-zip) (#7510) Co-authored-by: Claude Opus 5.5 --- integrations/openclaw/package.json | 2 +- integrations/openclaw/pnpm-lock.yaml | 10 +++--- integrations/openclaw/pnpm-workspace.yaml | 2 +- integrations/pi-agent-plugin/package.json | 4 +-- integrations/pi-agent-plugin/pnpm-lock.yaml | 20 +++++------ .../pi-agent-plugin/pnpm-workspace.yaml | 4 +-- mem0-ts/package.json | 6 ++-- mem0-ts/pnpm-lock.yaml | 36 +++++++++---------- mem0-ts/pnpm-workspace.yaml | 6 ++-- 9 files changed, 45 insertions(+), 45 deletions(-) diff --git a/integrations/openclaw/package.json b/integrations/openclaw/package.json index 39aaeb70e..df01be01a 100644 --- a/integrations/openclaw/package.json +++ b/integrations/openclaw/package.json @@ -72,7 +72,7 @@ "@qdrant/js-client-rest": "^1.18.0", "uuid@<11.1.1": ">=11.1.1", "esbuild": ">=0.28.1", - "undici@<7.29.0": ">=7.29.0 <8.0.0", + "undici@<7.29.1": ">=7.29.1 <8.0.0", "axios@<1.18.0": ">=1.18.0 <2.0.0", "postcss@<8.5.18": ">=8.5.18 <9.0.0", "mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0" diff --git a/integrations/openclaw/pnpm-lock.yaml b/integrations/openclaw/pnpm-lock.yaml index 79dd0d10a..6e8729d46 100644 --- a/integrations/openclaw/pnpm-lock.yaml +++ b/integrations/openclaw/pnpm-lock.yaml @@ -13,7 +13,7 @@ overrides: '@qdrant/js-client-rest': ^1.18.0 uuid@<11.1.1: '>=11.1.1' esbuild: '>=0.28.1' - undici@<7.29.0: '>=7.29.0 <8.0.0' + undici@<7.29.1: '>=7.29.1 <8.0.0' axios@<1.18.0: '>=1.18.0 <2.0.0' postcss@<8.5.18: '>=8.5.18 <9.0.0' mongoose@>=9.0.0 <9.7.2: '>=9.7.2 <10.0.0' @@ -2036,8 +2036,8 @@ packages: undici-types@6.21.0: resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==} - undici@7.29.0: - resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==} + undici@7.30.0: + resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==} engines: {node: '>=20.18.1'} util-deprecate@1.0.2: @@ -2547,7 +2547,7 @@ snapshots: dependencies: '@qdrant/openapi-typescript-fetch': 1.2.6 typescript: 5.9.3 - undici: 7.29.0 + undici: 7.30.0 '@qdrant/openapi-typescript-fetch@1.2.6': {} @@ -4121,7 +4121,7 @@ snapshots: undici-types@6.21.0: {} - undici@7.29.0: {} + undici@7.30.0: {} util-deprecate@1.0.2: {} diff --git a/integrations/openclaw/pnpm-workspace.yaml b/integrations/openclaw/pnpm-workspace.yaml index 0f9f833bc..34e812fa8 100644 --- a/integrations/openclaw/pnpm-workspace.yaml +++ b/integrations/openclaw/pnpm-workspace.yaml @@ -21,7 +21,7 @@ overrides: "@qdrant/js-client-rest": "^1.18.0" "uuid@<11.1.1": ">=11.1.1" "esbuild": ">=0.28.1" - "undici@<7.29.0": ">=7.29.0 <8.0.0" + "undici@<7.29.1": ">=7.29.1 <8.0.0" "axios@<1.18.0": ">=1.18.0 <2.0.0" "postcss@<8.5.18": ">=8.5.18 <9.0.0" "mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0" diff --git a/integrations/pi-agent-plugin/package.json b/integrations/pi-agent-plugin/package.json index fbec4db1b..56952c42f 100644 --- a/integrations/pi-agent-plugin/package.json +++ b/integrations/pi-agent-plugin/package.json @@ -72,8 +72,8 @@ "form-data@<4.0.6": ">=4.0.6", "uuid@<11.1.1": ">=11.1.1", "esbuild": ">=0.28.1", - "undici@<7.29.0": ">=7.29.0 <8.0.0", - "undici@>=8.0.0 <8.9.0": ">=8.9.0 <9.0.0", + "undici@<7.29.1": ">=7.29.1 <8.0.0", + "undici@>=8.0.0 <8.10.2": ">=8.10.2 <9.0.0", "axios@<1.18.0": ">=1.18.0 <2.0.0", "brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0", "postcss@<8.5.18": ">=8.5.18 <9.0.0", diff --git a/integrations/pi-agent-plugin/pnpm-lock.yaml b/integrations/pi-agent-plugin/pnpm-lock.yaml index 177023505..0a4100fc8 100644 --- a/integrations/pi-agent-plugin/pnpm-lock.yaml +++ b/integrations/pi-agent-plugin/pnpm-lock.yaml @@ -8,8 +8,8 @@ overrides: form-data@<4.0.6: '>=4.0.6' uuid@<11.1.1: '>=11.1.1' esbuild: '>=0.28.1' - undici@<7.29.0: '>=7.29.0 <8.0.0' - undici@>=8.0.0 <8.9.0: '>=8.9.0 <9.0.0' + undici@<7.29.1: '>=7.29.1 <8.0.0' + undici@>=8.0.0 <8.10.2: '>=8.10.2 <9.0.0' axios@<1.18.0: '>=1.18.0 <2.0.0' brace-expansion@>=3.0.0 <5.0.8: '>=5.0.8 <6.0.0' postcss@<8.5.18: '>=8.5.18 <9.0.0' @@ -2354,12 +2354,12 @@ packages: undici-types@7.24.6: resolution: {integrity: sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==} - undici@7.29.0: - resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==} + undici@7.30.0: + resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==} engines: {node: '>=20.18.1'} - undici@8.10.0: - resolution: {integrity: sha512-HvltHd7avK13QIw/oLe4qoOLyoVSoafqJ2jYOrtMRBkbYT31eiBQ8O0ehRKZiEZCMEyLFQNIADpgCWC5fALvYQ==} + undici@8.11.2: + resolution: {integrity: sha512-u4UB2/IrKdU6lFxumHmmo1a3fCQO5tzQllRorfoRS63txhrB7xTpSn1PftwC4qEHkOaqP95fCWW4lJzwErwzhQ==} engines: {node: '>=22.19.0'} util-deprecate@1.0.2: @@ -2942,7 +2942,7 @@ snapshots: minimatch: 10.2.5 proper-lockfile: 4.1.2 typebox: 1.1.38 - undici: 8.10.0 + undici: 8.11.2 yaml: 2.9.0 optionalDependencies: '@mariozechner/clipboard': 0.3.9 @@ -3203,7 +3203,7 @@ snapshots: dependencies: '@qdrant/openapi-typescript-fetch': 1.2.6 typescript: 6.0.3 - undici: 7.29.0 + undici: 7.30.0 '@qdrant/openapi-typescript-fetch@1.2.6': {} @@ -4895,9 +4895,9 @@ snapshots: undici-types@7.24.6: {} - undici@7.29.0: {} + undici@7.30.0: {} - undici@8.10.0: {} + undici@8.11.2: {} util-deprecate@1.0.2: {} diff --git a/integrations/pi-agent-plugin/pnpm-workspace.yaml b/integrations/pi-agent-plugin/pnpm-workspace.yaml index 283b117cc..071ea6a55 100644 --- a/integrations/pi-agent-plugin/pnpm-workspace.yaml +++ b/integrations/pi-agent-plugin/pnpm-workspace.yaml @@ -5,8 +5,8 @@ overrides: "form-data@<4.0.6": ">=4.0.6" "uuid@<11.1.1": ">=11.1.1" "esbuild": ">=0.28.1" - "undici@<7.29.0": ">=7.29.0 <8.0.0" - "undici@>=8.0.0 <8.9.0": ">=8.9.0 <9.0.0" + "undici@<7.29.1": ">=7.29.1 <8.0.0" + "undici@>=8.0.0 <8.10.2": ">=8.10.2 <9.0.0" "axios@<1.18.0": ">=1.18.0 <2.0.0" "brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0" "postcss@<8.5.18": ">=8.5.18 <9.0.0" diff --git a/mem0-ts/package.json b/mem0-ts/package.json index b03a73485..c34192188 100644 --- a/mem0-ts/package.json +++ b/mem0-ts/package.json @@ -288,7 +288,7 @@ "js-yaml@<3.15.1": ">=3.15.1 <4.0.0", "js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0", "sharp@<0.35.0": ">=0.35.0 <0.36.0", - "adm-zip@<0.6.0": ">=0.6.0 <0.7.0", + "adm-zip@<0.6.1": ">=0.6.1 <0.7.0", "langsmith@<0.6.0": "^0.6.0", "minimatch@<3.1.3": "^3.1.3", "minimatch@>=5.0.0 <5.1.8": "^5.1.8", @@ -303,7 +303,7 @@ "glob@>=10.2.0 <10.5.0": "^10.5.0", "@modelcontextprotocol/sdk": "^1.25.4", "esbuild": ">=0.28.1", - "undici@<7.29.0": ">=7.29.0 <8.0.0", + "undici@<7.29.1": ">=7.29.1 <8.0.0", "@aws-sdk/client-bedrock-runtime": "3.967.0", "@aws-sdk/client-neptune-graph": "3.966.0", "axios@<1.18.0": ">=1.18.0 <2.0.0", @@ -315,7 +315,7 @@ "thrift@<0.23.0": "^0.23.0", "mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0", "protobufjs@<7.6.5": ">=7.6.5 <8.0.0", - "ip-address@<10.3.1": ">=10.3.1 <11.0.0", + "ip-address@<10.5.1": ">=10.5.1 <11.0.0", "browserslist@<4.28.7": ">=4.28.7 <5.0.0", "mysql2@<3.23.1": ">=3.23.1 <4.0.0" } diff --git a/mem0-ts/pnpm-lock.yaml b/mem0-ts/pnpm-lock.yaml index 5e04cbfdd..27e0811f7 100644 --- a/mem0-ts/pnpm-lock.yaml +++ b/mem0-ts/pnpm-lock.yaml @@ -12,7 +12,7 @@ overrides: js-yaml@<3.15.1: '>=3.15.1 <4.0.0' js-yaml@>=4.0.0 <4.3.1: '>=4.3.1 <5.0.0' sharp@<0.35.0: '>=0.35.0 <0.36.0' - adm-zip@<0.6.0: '>=0.6.0 <0.7.0' + adm-zip@<0.6.1: '>=0.6.1 <0.7.0' langsmith@<0.6.0: ^0.6.0 minimatch@<3.1.3: ^3.1.3 minimatch@>=5.0.0 <5.1.8: ^5.1.8 @@ -27,7 +27,7 @@ overrides: glob@>=10.2.0 <10.5.0: ^10.5.0 '@modelcontextprotocol/sdk': ^1.25.4 esbuild: '>=0.28.1' - undici@<7.29.0: '>=7.29.0 <8.0.0' + undici@<7.29.1: '>=7.29.1 <8.0.0' '@aws-sdk/client-bedrock-runtime': 3.967.0 '@aws-sdk/client-neptune-graph': 3.966.0 axios@<1.18.0: '>=1.18.0 <2.0.0' @@ -39,7 +39,7 @@ overrides: thrift@<0.23.0: ^0.23.0 mongoose@>=9.0.0 <9.7.2: '>=9.7.2 <10.0.0' protobufjs@<7.6.5: '>=7.6.5 <8.0.0' - ip-address@<10.3.1: '>=10.3.1 <11.0.0' + ip-address@<10.5.1: '>=10.5.1 <11.0.0' browserslist@<4.28.7: '>=4.28.7 <5.0.0' mysql2@<3.23.1: '>=3.23.1 <4.0.0' @@ -2009,8 +2009,8 @@ packages: engines: {node: '>=0.4.0'} hasBin: true - adm-zip@0.6.0: - resolution: {integrity: sha512-XleryMhbuksdKtofnWZ9Sk+4CUTbms4Mb/EU32SZwToAyZ5RgVos/ki8n+yr0LWHOGKuakbXTuuYNHLQjhddgg==} + adm-zip@0.6.1: + resolution: {integrity: sha512-Xwrja8nx9e5o2N1my4DsKCeKpdrnACyr1wtbPxBDgGzKzKyE9kRtBFA8mWldI+RVlD7CBZNWY/wQ2+ydwOR6kQ==} engines: {node: '>=14.0'} afinn-165-financialmarketnews@3.0.0: @@ -3034,8 +3034,8 @@ packages: resolution: {integrity: sha512-4rTJX6Q5wTYEvxboXi8DsEiUo+OvqJGtLYOSGm37KpdRXsG5XJjbVtYKGJpPSWP+QT7rWscA4vsrdmzbEbenpw==} engines: {node: '>=18.12.0'} - ip-address@10.4.0: - resolution: {integrity: sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==} + ip-address@10.7.2: + resolution: {integrity: sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==} engines: {node: '>= 12'} is-arrayish@0.2.1: @@ -4609,8 +4609,8 @@ packages: undici-types@7.24.6: resolution: {integrity: sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==} - undici@7.29.0: - resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==} + undici@7.30.0: + resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==} engines: {node: '>=20.18.1'} update-browserslist-db@1.3.2: @@ -6138,7 +6138,7 @@ snapshots: ms: 2.1.3 secure-json-parse: 4.1.0 tslib: 2.8.1 - undici: 7.29.0 + undici: 7.30.0 transitivePeerDependencies: - supports-color @@ -6706,7 +6706,7 @@ snapshots: dependencies: '@qdrant/openapi-typescript-fetch': 1.2.6 typescript: 5.5.4 - undici: 7.29.0 + undici: 7.30.0 '@qdrant/openapi-typescript-fetch@1.2.6': {} @@ -7178,7 +7178,7 @@ snapshots: '@turbopuffer/turbopuffer@2.5.0': dependencies: pako: 2.2.0 - undici: 7.29.0 + undici: 7.30.0 '@types/babel__core@7.20.5': dependencies: @@ -7346,7 +7346,7 @@ snapshots: acorn@8.16.0: {} - adm-zip@0.6.0: {} + adm-zip@0.6.1: {} afinn-165-financialmarketnews@3.0.0: {} @@ -7614,7 +7614,7 @@ snapshots: cassandra-driver@4.8.0: dependencies: '@types/node': 18.19.130 - adm-zip: 0.6.0 + adm-zip: 0.6.1 long: 5.2.5 chalk-template@0.4.0: @@ -8435,7 +8435,7 @@ snapshots: transitivePeerDependencies: - supports-color - ip-address@10.4.0: {} + ip-address@10.7.2: {} is-arrayish@0.2.1: {} @@ -9291,7 +9291,7 @@ snapshots: onnxruntime-node@1.24.3: dependencies: - adm-zip: 0.6.0 + adm-zip: 0.6.1 global-agent: 3.0.0 onnxruntime-common: 1.24.3 @@ -9845,7 +9845,7 @@ snapshots: socks@2.8.9: dependencies: - ip-address: 10.4.0 + ip-address: 10.7.2 smart-buffer: 4.2.0 source-map-support@0.5.13: @@ -10182,7 +10182,7 @@ snapshots: undici-types@7.24.6: {} - undici@7.29.0: {} + undici@7.30.0: {} update-browserslist-db@1.3.2(browserslist@4.28.9): dependencies: diff --git a/mem0-ts/pnpm-workspace.yaml b/mem0-ts/pnpm-workspace.yaml index 4048a653c..61017d969 100644 --- a/mem0-ts/pnpm-workspace.yaml +++ b/mem0-ts/pnpm-workspace.yaml @@ -13,7 +13,7 @@ overrides: "js-yaml@<3.15.1": ">=3.15.1 <4.0.0" "js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0" "sharp@<0.35.0": ">=0.35.0 <0.36.0" - "adm-zip@<0.6.0": ">=0.6.0 <0.7.0" + "adm-zip@<0.6.1": ">=0.6.1 <0.7.0" "langsmith@<0.6.0": "^0.6.0" "minimatch@<3.1.3": "^3.1.3" "minimatch@>=5.0.0 <5.1.8": "^5.1.8" @@ -27,7 +27,7 @@ overrides: "glob@>=10.2.0 <10.5.0": "^10.5.0" "@modelcontextprotocol/sdk": "^1.25.4" "esbuild": ">=0.28.1" - "undici@<7.29.0": ">=7.29.0 <8.0.0" + "undici@<7.29.1": ">=7.29.1 <8.0.0" "axios@<1.18.0": ">=1.18.0 <2.0.0" "brace-expansion@<1.1.16": ">=1.1.16 <2.0.0" "brace-expansion@>=2.0.0 <2.1.4": ">=2.1.4 <3.0.0" @@ -37,7 +37,7 @@ overrides: "thrift@<0.23.0": "^0.23.0" "mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0" "protobufjs@<7.6.5": ">=7.6.5 <8.0.0" - "ip-address@<10.3.1": ">=10.3.1 <11.0.0" + "ip-address@<10.5.1": ">=10.5.1 <11.0.0" "browserslist@<4.28.7": ">=4.28.7 <5.0.0" "mysql2@<3.23.1": ">=3.23.1 <4.0.0"