Files
mem0/mem0-ts/pnpm-workspace.yaml
T
harshgupta-mem0andClaude Opus 5.5 7839d5db5d fix(mem0-ts): bump adm-zip to >=0.6.1 (CVE-2026-76845)
0.6.1 is outside the advisory's vulnerable range (>=0.5.9, <=0.6.0) and also fixes HIGH CVE-2026-77301.

Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-medium

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 15:32:37 +05:30

46 lines
1.4 KiB
YAML

packages:
- "."
onlyBuiltDependencies:
- esbuild
- better-sqlite3
overrides:
"form-data@<4.0.6": ">=4.0.6"
"picomatch@<2.3.2": "^2.3.2"
"picomatch@>=4.0.0 <4.0.4": "^4.0.4"
"jws@4.0.0": "4.0.1"
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0"
"js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0"
"sharp@<0.35.0": ">=0.35.0 <0.36.0"
"adm-zip@<0.6.1": ">=0.6.1 <0.7.0"
"langsmith@<0.6.0": "^0.6.0"
"minimatch@<3.1.3": "^3.1.3"
"minimatch@>=5.0.0 <5.1.8": "^5.1.8"
"minimatch@>=9.0.0 <9.0.7": "^9.0.7"
"path-to-regexp@>=8.0.0 <8.4.0": "^8.4.0"
"postcss@<8.5.18": ">=8.5.18 <9.0.0"
"uuid@<11.1.1": ">=11.1.1"
"ws@>=8.0.0 <8.20.1": ">=8.20.1"
"rollup@>=4.0.0 <4.59.0": "^4.59.0"
"tar-fs@>=2.0.0 <2.1.4": "^2.1.4"
"glob@>=10.2.0 <10.5.0": "^10.5.0"
"@modelcontextprotocol/sdk": "^1.25.4"
"esbuild": ">=0.28.1"
"undici@<7.29.1": ">=7.29.1 <8.0.0"
"axios@<1.18.0": ">=1.18.0 <2.0.0"
"brace-expansion@<1.1.16": ">=1.1.16 <2.0.0"
"brace-expansion@>=2.0.0 <2.1.4": ">=2.1.4 <3.0.0"
"brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0"
"fast-xml-parser@>=5.0.0 <5.10.1": ">=5.10.1 <6.0.0"
"tar@<7.5.21": ">=7.5.21 <8.0.0"
"thrift@<0.23.0": "^0.23.0"
"mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0"
"protobufjs@<7.6.5": ">=7.6.5 <8.0.0"
"ip-address@<10.5.1": ">=10.5.1 <11.0.0"
"browserslist@<4.28.7": ">=4.28.7 <5.0.0"
"mysql2@<3.23.1": ">=3.23.1 <4.0.0"
patchedDependencies:
"tar@7.5.22": "patches/tar@7.5.22.patch"