Skip to content

dbeaver/pro#10205 removes nanoid CVE - #4543

Merged
serge-rider merged 3 commits into
develfrom
10205-fix-high-cve-in-nanoid-and-image-size-libraries
Aug 11, 2026
Merged

dbeaver/pro#10205 removes nanoid CVE#4543
serge-rider merged 3 commits into
develfrom
10205-fix-high-cve-in-nanoid-and-image-size-libraries

Conversation

@sergeyteleshev

Copy link
Copy Markdown
Contributor

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results
Complexity 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Comment thread webapp/package.json
"postcss": ">=8.5.18"
"postcss": ">=8.5.18",
"nanoid": ">=3.3.17",
"less": ">=4.7.0"

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

deps chain is like this:
vite -> less -> image-size

image-size had CVE and it is readonly repo now, not supported by author anymore. so I've updated less to version where they removed this image-size dep

@serge-rider
serge-rider merged commit 707cb3e into devel Aug 11, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants