From b91b2b8fc41e9c081a8fa4381bf2a3dc36dc6c86 Mon Sep 17 00:00:00 2001
From: Harsh Vardhan Gupta <harsh.gupta@mem0.ai>
Date: Sun, 31 May 2026 00:34:27 +0530
Subject: [PATCH] fix: apply pnpm overrides for HIGH severity vulnerabilities

- Add immutable >=5.1.5 override to openmemory/ui (CVE-2026-29063)
- Add langsmith >=0.6.0 override to openclaw (CVE-2026-32460)
- Add langsmith >=0.6.0 override to mem0-ts (CVE-2026-32460)

Fixes #5318, #5320
---
 mem0-ts/package.json       | 5 ++++-
 openclaw/package.json      | 3 ++-
 openmemory/ui/package.json | 5 ++++-
 3 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/mem0-ts/package.json b/mem0-ts/package.json
index cc24d72ca..a94e5a10d 100644
--- a/mem0-ts/package.json
+++ b/mem0-ts/package.json
@@ -137,6 +137,9 @@
     "onlyBuiltDependencies": [
       "esbuild",
       "better-sqlite3"
-    ]
+    ],
+    "overrides": {
+      "langsmith": ">=0.6.0"
+    }
   }
 }
diff --git a/openclaw/package.json b/openclaw/package.json
index f5ab4856d..ad7840147 100644
--- a/openclaw/package.json
+++ b/openclaw/package.json
@@ -62,7 +62,8 @@
   },
   "pnpm": {
     "overrides": {
-      "protobufjs@<7.5.5": "^7.5.5"
+      "protobufjs@<7.5.5": "^7.5.5",
+      "langsmith": ">=0.6.0"
     }
   }
 }
diff --git a/openmemory/ui/package.json b/openmemory/ui/package.json
index 96a850099..b233b1196 100644
--- a/openmemory/ui/package.json
+++ b/openmemory/ui/package.json
@@ -79,6 +79,9 @@
     "onlyBuiltDependencies": [
       "@parcel/watcher",
       "sharp"
-    ]
+    ],
+    "overrides": {
+      "immutable": ">=5.1.5"
+    }
   }
 }