Skip to content

fix(deps): vuln flatted (minor → 3.4.2) #2384

Merged
Drarig29 merged 3 commits into
masterfrom
engraver-auto-version-upgrade/minorpatch/npm/1-1782468758
Jun 26, 2026
Merged

fix(deps): vuln flatted (minor → 3.4.2) #2384
Drarig29 merged 3 commits into
masterfrom
engraver-auto-version-upgrade/minorpatch/npm/1-1782468758

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: High-severity security update — 1 package upgraded (MINOR changes included)

Manifests changed:

  • . (yarn)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
flatted 3.3.1 3.4.2 minor Transitive 4 HIGH

Security Details

🚨 Critical & High Severity (4 fixed)
Package CVE Severity Summary Unsafe Version Fixed In
flatted GHSA-rf6f-7fwh-wjgh HIGH Prototype Pollution via parse() in NodeJS flatted 3.3.1 3.4.2
flatted CVE-2026-33228 HIGH flatted: Prototype Pollution via parse() 3.3.1 -
flatted GHSA-25h7-pfq9-p65f HIGH flatted vulnerable to unbounded recursion DoS in parse() revive phase 3.3.1 3.4.0
flatted CVE-2026-32141 HIGH flatted: Unbounded recursion DoS in parse() revive phase 3.3.1 -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@datadog-datadog-prod-us1-2

This comment has been minimized.

gh-worker-campaigns-3e9aa4 Bot and others added 2 commits June 26, 2026 13:12
Same workaround already applied to the ARM Alpine job.

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
@Drarig29
Drarig29 force-pushed the engraver-auto-version-upgrade/minorpatch/npm/1-1782468758 branch from 5772602 to f5dd6cc Compare June 26, 2026 11:13
@Drarig29
Drarig29 marked this pull request as ready for review June 26, 2026 11:56
@Drarig29
Drarig29 requested a review from a team as a code owner June 26, 2026 11:56
@Drarig29
Drarig29 merged commit 6cbca61 into master Jun 26, 2026
34 checks passed
@Drarig29
Drarig29 deleted the engraver-auto-version-upgrade/minorpatch/npm/1-1782468758 branch June 26, 2026 12:26
@ava-silver ava-silver mentioned this pull request Jun 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant