JDSS/mem0
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): resolve 7 Vanta MEDIUM Dependabot vulnerabilities (undici, ip-address, adm-zip) (#7510)

Browse Source 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Harsh Vardhan Gupta
2026-10-01 21:46:18 +05:30
committed by GitHub
parent 94c3fe9f23
commit abb81c88e1
9 changed files with 45 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files
integrations/openclaw/package.json
+1 -1
View File
@@ -72,7 +72,7 @@
"@qdrant/js-client-rest": "^1.18.0",
"uuid@<11.1.1": ">=11.1.1",
"esbuild": ">=0.28.1",
"undici@<7.29.0": ">=7.29.0 <8.0.0",
"undici@<7.29.1": ">=7.29.1 <8.0.0",
"axios@<1.18.0": ">=1.18.0 <2.0.0",
"postcss@<8.5.18": ">=8.5.18 <9.0.0",
"mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0"
integrations/openclaw/pnpm-lock.yaml
Generated
+5 -5
View File
@@ -13,7 +13,7 @@ overrides:
'@qdrant/js-client-rest': ^1.18.0
uuid@<11.1.1: '>=11.1.1'
esbuild: '>=0.28.1'
undici@<7.29.0: '>=7.29.0 <8.0.0'
undici@<7.29.1: '>=7.29.1 <8.0.0'
axios@<1.18.0: '>=1.18.0 <2.0.0'
postcss@<8.5.18: '>=8.5.18 <9.0.0'
mongoose@>=9.0.0 <9.7.2: '>=9.7.2 <10.0.0'
@@ -2036,8 +2036,8 @@ packages:
undici-types@6.21.0:
resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
undici@7.29.0:
resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==}
undici@7.30.0:
resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==}
engines: {node: '>=20.18.1'}
util-deprecate@1.0.2:
@@ -2547,7 +2547,7 @@ snapshots:
dependencies:
'@qdrant/openapi-typescript-fetch': 1.2.6
typescript: 5.9.3
undici: 7.29.0
undici: 7.30.0
'@qdrant/openapi-typescript-fetch@1.2.6': {}
@@ -4121,7 +4121,7 @@ snapshots:
undici-types@6.21.0: {}
undici@7.29.0: {}
undici@7.30.0: {}
util-deprecate@1.0.2: {}
integrations/openclaw/pnpm-workspace.yaml
+1 -1
View File
@@ -21,7 +21,7 @@ overrides:
"@qdrant/js-client-rest": "^1.18.0"
"uuid@<11.1.1": ">=11.1.1"
"esbuild": ">=0.28.1"
"undici@<7.29.0": ">=7.29.0 <8.0.0"
"undici@<7.29.1": ">=7.29.1 <8.0.0"
"axios@<1.18.0": ">=1.18.0 <2.0.0"
"postcss@<8.5.18": ">=8.5.18 <9.0.0"
"mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0"
integrations/pi-agent-plugin/package.json
+2 -2
View File
@@ -72,8 +72,8 @@
"form-data@<4.0.6": ">=4.0.6",
"uuid@<11.1.1": ">=11.1.1",
"esbuild": ">=0.28.1",
"undici@<7.29.0": ">=7.29.0 <8.0.0",
"undici@>=8.0.0 <8.9.0": ">=8.9.0 <9.0.0",
"undici@<7.29.1": ">=7.29.1 <8.0.0",
"undici@>=8.0.0 <8.10.2": ">=8.10.2 <9.0.0",
"axios@<1.18.0": ">=1.18.0 <2.0.0",
"brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0",
"postcss@<8.5.18": ">=8.5.18 <9.0.0",
integrations/pi-agent-plugin/pnpm-lock.yaml
Generated
+10 -10
View File
@@ -8,8 +8,8 @@ overrides:
form-data@<4.0.6: '>=4.0.6'
uuid@<11.1.1: '>=11.1.1'
esbuild: '>=0.28.1'
undici@<7.29.0: '>=7.29.0 <8.0.0'
undici@>=8.0.0 <8.9.0: '>=8.9.0 <9.0.0'
undici@<7.29.1: '>=7.29.1 <8.0.0'
undici@>=8.0.0 <8.10.2: '>=8.10.2 <9.0.0'
axios@<1.18.0: '>=1.18.0 <2.0.0'
brace-expansion@>=3.0.0 <5.0.8: '>=5.0.8 <6.0.0'
postcss@<8.5.18: '>=8.5.18 <9.0.0'
@@ -2354,12 +2354,12 @@ packages:
undici-types@7.24.6:
resolution: {integrity: sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==}
undici@7.29.0:
resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==}
undici@7.30.0:
resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==}
engines: {node: '>=20.18.1'}
undici@8.10.0:
resolution: {integrity: sha512-HvltHd7avK13QIw/oLe4qoOLyoVSoafqJ2jYOrtMRBkbYT31eiBQ8O0ehRKZiEZCMEyLFQNIADpgCWC5fALvYQ==}
undici@8.11.2:
resolution: {integrity: sha512-u4UB2/IrKdU6lFxumHmmo1a3fCQO5tzQllRorfoRS63txhrB7xTpSn1PftwC4qEHkOaqP95fCWW4lJzwErwzhQ==}
engines: {node: '>=22.19.0'}
util-deprecate@1.0.2:
@@ -2942,7 +2942,7 @@ snapshots:
minimatch: 10.2.5
proper-lockfile: 4.1.2
typebox: 1.1.38
undici: 8.10.0
undici: 8.11.2
yaml: 2.9.0
optionalDependencies:
'@mariozechner/clipboard': 0.3.9
@@ -3203,7 +3203,7 @@ snapshots:
dependencies:
'@qdrant/openapi-typescript-fetch': 1.2.6
typescript: 6.0.3
undici: 7.29.0
undici: 7.30.0
'@qdrant/openapi-typescript-fetch@1.2.6': {}
@@ -4895,9 +4895,9 @@ snapshots:
undici-types@7.24.6: {}
undici@7.29.0: {}
undici@7.30.0: {}
undici@8.10.0: {}
undici@8.11.2: {}
util-deprecate@1.0.2: {}
integrations/pi-agent-plugin/pnpm-workspace.yaml
+2 -2
View File
@@ -5,8 +5,8 @@ overrides:
"form-data@<4.0.6": ">=4.0.6"
"uuid@<11.1.1": ">=11.1.1"
"esbuild": ">=0.28.1"
"undici@<7.29.0": ">=7.29.0 <8.0.0"
"undici@>=8.0.0 <8.9.0": ">=8.9.0 <9.0.0"
"undici@<7.29.1": ">=7.29.1 <8.0.0"
"undici@>=8.0.0 <8.10.2": ">=8.10.2 <9.0.0"
"axios@<1.18.0": ">=1.18.0 <2.0.0"
"brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0"
"postcss@<8.5.18": ">=8.5.18 <9.0.0"
mem0-ts/package.json
+3 -3
View File
@@ -288,7 +288,7 @@
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0",
"js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0",
"sharp@<0.35.0": ">=0.35.0 <0.36.0",
"adm-zip@<0.6.0": ">=0.6.0 <0.7.0",
"adm-zip@<0.6.1": ">=0.6.1 <0.7.0",
"langsmith@<0.6.0": "^0.6.0",
"minimatch@<3.1.3": "^3.1.3",
"minimatch@>=5.0.0 <5.1.8": "^5.1.8",
@@ -303,7 +303,7 @@
"glob@>=10.2.0 <10.5.0": "^10.5.0",
"@modelcontextprotocol/sdk": "^1.25.4",
"esbuild": ">=0.28.1",
"undici@<7.29.0": ">=7.29.0 <8.0.0",
"undici@<7.29.1": ">=7.29.1 <8.0.0",
"@aws-sdk/client-bedrock-runtime": "3.967.0",
"@aws-sdk/client-neptune-graph": "3.966.0",
"axios@<1.18.0": ">=1.18.0 <2.0.0",
@@ -315,7 +315,7 @@
"thrift@<0.23.0": "^0.23.0",
"mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0",
"protobufjs@<7.6.5": ">=7.6.5 <8.0.0",
"ip-address@<10.3.1": ">=10.3.1 <11.0.0",
"ip-address@<10.5.1": ">=10.5.1 <11.0.0",
"browserslist@<4.28.7": ">=4.28.7 <5.0.0",
"mysql2@<3.23.1": ">=3.23.1 <4.0.0"
}
mem0-ts/pnpm-lock.yaml
Generated
+18 -18
View File
@@ -12,7 +12,7 @@ overrides:
js-yaml@<3.15.1: '>=3.15.1 <4.0.0'
js-yaml@>=4.0.0 <4.3.1: '>=4.3.1 <5.0.0'
sharp@<0.35.0: '>=0.35.0 <0.36.0'
adm-zip@<0.6.0: '>=0.6.0 <0.7.0'
adm-zip@<0.6.1: '>=0.6.1 <0.7.0'
langsmith@<0.6.0: ^0.6.0
minimatch@<3.1.3: ^3.1.3
minimatch@>=5.0.0 <5.1.8: ^5.1.8
@@ -27,7 +27,7 @@ overrides:
glob@>=10.2.0 <10.5.0: ^10.5.0
'@modelcontextprotocol/sdk': ^1.25.4
esbuild: '>=0.28.1'
undici@<7.29.0: '>=7.29.0 <8.0.0'
undici@<7.29.1: '>=7.29.1 <8.0.0'
'@aws-sdk/client-bedrock-runtime': 3.967.0
'@aws-sdk/client-neptune-graph': 3.966.0
axios@<1.18.0: '>=1.18.0 <2.0.0'
@@ -39,7 +39,7 @@ overrides:
thrift@<0.23.0: ^0.23.0
mongoose@>=9.0.0 <9.7.2: '>=9.7.2 <10.0.0'
protobufjs@<7.6.5: '>=7.6.5 <8.0.0'
ip-address@<10.3.1: '>=10.3.1 <11.0.0'
ip-address@<10.5.1: '>=10.5.1 <11.0.0'
browserslist@<4.28.7: '>=4.28.7 <5.0.0'
mysql2@<3.23.1: '>=3.23.1 <4.0.0'
@@ -2009,8 +2009,8 @@ packages:
engines: {node: '>=0.4.0'}
hasBin: true
adm-zip@0.6.0:
resolution: {integrity: sha512-XleryMhbuksdKtofnWZ9Sk+4CUTbms4Mb/EU32SZwToAyZ5RgVos/ki8n+yr0LWHOGKuakbXTuuYNHLQjhddgg==}
adm-zip@0.6.1:
resolution: {integrity: sha512-Xwrja8nx9e5o2N1my4DsKCeKpdrnACyr1wtbPxBDgGzKzKyE9kRtBFA8mWldI+RVlD7CBZNWY/wQ2+ydwOR6kQ==}
engines: {node: '>=14.0'}
afinn-165-financialmarketnews@3.0.0:
@@ -3034,8 +3034,8 @@ packages:
resolution: {integrity: sha512-4rTJX6Q5wTYEvxboXi8DsEiUo+OvqJGtLYOSGm37KpdRXsG5XJjbVtYKGJpPSWP+QT7rWscA4vsrdmzbEbenpw==}
engines: {node: '>=18.12.0'}
ip-address@10.4.0:
resolution: {integrity: sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==}
ip-address@10.7.2:
resolution: {integrity: sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==}
engines: {node: '>= 12'}
is-arrayish@0.2.1:
@@ -4609,8 +4609,8 @@ packages:
undici-types@7.24.6:
resolution: {integrity: sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==}
undici@7.29.0:
resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==}
undici@7.30.0:
resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==}
engines: {node: '>=20.18.1'}
update-browserslist-db@1.3.2:
@@ -6138,7 +6138,7 @@ snapshots:
ms: 2.1.3
secure-json-parse: 4.1.0
tslib: 2.8.1
undici: 7.29.0
undici: 7.30.0
transitivePeerDependencies:
- supports-color
@@ -6706,7 +6706,7 @@ snapshots:
dependencies:
'@qdrant/openapi-typescript-fetch': 1.2.6
typescript: 5.5.4
undici: 7.29.0
undici: 7.30.0
'@qdrant/openapi-typescript-fetch@1.2.6': {}
@@ -7178,7 +7178,7 @@ snapshots:
'@turbopuffer/turbopuffer@2.5.0':
dependencies:
pako: 2.2.0
undici: 7.29.0
undici: 7.30.0
'@types/babel__core@7.20.5':
dependencies:
@@ -7346,7 +7346,7 @@ snapshots:
acorn@8.16.0: {}
adm-zip@0.6.0: {}
adm-zip@0.6.1: {}
afinn-165-financialmarketnews@3.0.0: {}
@@ -7614,7 +7614,7 @@ snapshots:
cassandra-driver@4.8.0:
dependencies:
'@types/node': 18.19.130
adm-zip: 0.6.0
adm-zip: 0.6.1
long: 5.2.5
chalk-template@0.4.0:
@@ -8435,7 +8435,7 @@ snapshots:
transitivePeerDependencies:
- supports-color
ip-address@10.4.0: {}
ip-address@10.7.2: {}
is-arrayish@0.2.1: {}
@@ -9291,7 +9291,7 @@ snapshots:
onnxruntime-node@1.24.3:
dependencies:
adm-zip: 0.6.0
adm-zip: 0.6.1
global-agent: 3.0.0
onnxruntime-common: 1.24.3
@@ -9845,7 +9845,7 @@ snapshots:
socks@2.8.9:
dependencies:
ip-address: 10.4.0
ip-address: 10.7.2
smart-buffer: 4.2.0
source-map-support@0.5.13:
@@ -10182,7 +10182,7 @@ snapshots:
undici-types@7.24.6: {}
undici@7.29.0: {}
undici@7.30.0: {}
update-browserslist-db@1.3.2(browserslist@4.28.9):
dependencies:
mem0-ts/pnpm-workspace.yaml
+3 -3
View File
@@ -13,7 +13,7 @@ overrides:
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0"
"js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0"
"sharp@<0.35.0": ">=0.35.0 <0.36.0"
"adm-zip@<0.6.0": ">=0.6.0 <0.7.0"
"adm-zip@<0.6.1": ">=0.6.1 <0.7.0"
"langsmith@<0.6.0": "^0.6.0"
"minimatch@<3.1.3": "^3.1.3"
"minimatch@>=5.0.0 <5.1.8": "^5.1.8"
@@ -27,7 +27,7 @@ overrides:
"glob@>=10.2.0 <10.5.0": "^10.5.0"
"@modelcontextprotocol/sdk": "^1.25.4"
"esbuild": ">=0.28.1"
"undici@<7.29.0": ">=7.29.0 <8.0.0"
"undici@<7.29.1": ">=7.29.1 <8.0.0"
"axios@<1.18.0": ">=1.18.0 <2.0.0"
"brace-expansion@<1.1.16": ">=1.1.16 <2.0.0"
"brace-expansion@>=2.0.0 <2.1.4": ">=2.1.4 <3.0.0"
@@ -37,7 +37,7 @@ overrides:
"thrift@<0.23.0": "^0.23.0"
"mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0"
"protobufjs@<7.6.5": ">=7.6.5 <8.0.0"
"ip-address@<10.3.1": ">=10.3.1 <11.0.0"
"ip-address@<10.5.1": ">=10.5.1 <11.0.0"
"browserslist@<4.28.7": ">=4.28.7 <5.0.0"
"mysql2@<3.23.1": ">=3.23.1 <4.0.0"