From 234095fe119ba0220af1e913b0950dee2329250e Mon Sep 17 00:00:00 2001 From: anupamme Date: Thu, 30 Jul 2026 08:41:53 +0000 Subject: [PATCH] fix: GHSA-vjh7-7g9h-fjfh security vulnerability Automated dependency upgrade by OrbisAI Security --- apps/content-analysis/.yarnrc.yml | 8 ++++++++ apps/content-analysis/package.json | 3 +++ apps/content-analysis/yarn.lock | 6 +++--- 3 files changed, 14 insertions(+), 3 deletions(-) create mode 100644 apps/content-analysis/.yarnrc.yml diff --git a/apps/content-analysis/.yarnrc.yml b/apps/content-analysis/.yarnrc.yml new file mode 100644 index 00000000000..063ed601645 --- /dev/null +++ b/apps/content-analysis/.yarnrc.yml @@ -0,0 +1,8 @@ +approvedGitRepositories: + - "**" + +enableScripts: true + +nodeLinker: node-modules + +npmMinimalAgeGate: 0 diff --git a/apps/content-analysis/package.json b/apps/content-analysis/package.json index 4013fc20587..9aab1b46e8b 100644 --- a/apps/content-analysis/package.json +++ b/apps/content-analysis/package.json @@ -87,5 +87,8 @@ }, "devDependencies": { "@babel/plugin-transform-optional-chaining": "^7.27.1" + }, + "resolutions": { + "elliptic": "6.6.1" } } diff --git a/apps/content-analysis/yarn.lock b/apps/content-analysis/yarn.lock index 3b76ba49277..0228fa4e9c1 100644 --- a/apps/content-analysis/yarn.lock +++ b/apps/content-analysis/yarn.lock @@ -5851,9 +5851,9 @@ electron-to-chromium@^1.5.41: integrity sha512-gIfKavKDw1mhvic9nbzA5lZw8QSHpdMwLwXc0cWidQz9B15pDoDdDH4boIatuFfeoCatb3a/NGL6CYRVFxGZ9g== elliptic@^6.5.3: - version "6.5.4" - resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.5.4.tgz#da37cebd31e79a1367e941b592ed1fbebd58abbb" - integrity sha512-iLhC6ULemrljPZb+QutR5TQGB+pdW6KGD5RSegS+8sorOZT+rdQFbsQFJgvN3eRqNALqJer4oQ16YvJHlU8hzQ== + version "6.6.1" + resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.6.1.tgz#3b8ffb02670bf69e382c7f65bf524c97c5405c06" + integrity sha512-RaddvvMatK2LJHqFJ+YA4WysVN5Ita9E35botqIYspQ4TkRAlCicdzKOjlyv/1Za5RyTNn7di//eEV0uTAfe3g== dependencies: bn.js "^4.11.9" brorand "^1.1.0"