Skip to content

dbeaver/pro#10205 removes nanoid CVE #4543

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
serge-rider merged 3 commits into from
Aug 11, 2026
Merged

dbeaver/pro#10205 removes nanoid CVE #4543

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a1a3fb8
dbeaver/pro#10205 removes nanoid CVE
sergeyteleshev Aug 11, 2026
75280a7
dbeaver/pro#10205 fixes image-size CVE with updating LESS
sergeyteleshev Aug 11, 2026
364ff8e
Merge branch 'devel' into 10205-fix-high-cve-in-nanoid-and-image-size…
mr-anton-t Aug 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion webapp/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,9 @@
"js-yaml": ">=5.2.2",
"brace-expansion": ">=5.0.9",
"axios": ">=1.18.0",
"postcss": ">=8.5.18"
"postcss": ">=8.5.18",
"nanoid": ">=3.3.17",
"less": ">=4.7.0"

@sergeyteleshev sergeyteleshev Aug 11, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

deps chain is like this:
vite -> less -> image-size

image-size had CVE and it is readonly repo now, not supported by author anymore. so I've updated less to version where they removed this image-size dep

},
"scripts": {
"test": "dbeaver-test",
Expand Down
133 changes: 86 additions & 47 deletions webapp/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11795,6 +11795,15 @@ __metadata:
languageName: node
linkType: hard

"debug@npm:2":
version: 2.6.9
resolution: "debug@npm:2.6.9"
dependencies:
ms: "npm:2.0.0"
checksum: 10c0/121908fb839f7801180b69a7e218a40b5a0b718813b886b7d6bdb82001b931c938e2941d1e4450f33a1b1df1da653f5f7a0440c197f29fbf8a6e9d45ff6ef589
languageName: node
linkType: hard

"debug@npm:4, debug@npm:^4.0.0, debug@npm:^4.1.0, debug@npm:^4.1.1, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.3, debug@npm:^4.3.6, debug@npm:^4.4.0, debug@npm:^4.4.3":
version: 4.4.3
resolution: "debug@npm:4.4.3"
Expand All @@ -11807,6 +11816,15 @@ __metadata:
languageName: node
linkType: hard

"debug@npm:^3.2.6":
version: 3.2.7
resolution: "debug@npm:3.2.7"
dependencies:
ms: "npm:^2.1.1"
checksum: 10c0/37d96ae42cbc71c14844d2ae3ba55adf462ec89fd3a999459dec3833944cd999af6007ff29c780f1c61153bcaaf2c842d1e4ce1ec621e4fc4923244942e4a02a
languageName: node
linkType: hard

"decamelize@npm:^1.2.0":
version: 1.2.0
resolution: "decamelize@npm:1.2.0"
Expand Down Expand Up @@ -13942,6 +13960,15 @@ __metadata:
languageName: node
linkType: hard

"iconv-lite@npm:^0.4.4":
version: 0.4.24
resolution: "iconv-lite@npm:0.4.24"
dependencies:
safer-buffer: "npm:>= 2.1.2 < 3"
checksum: 10c0/c6886a24cc00f2a059767440ec1bc00d334a89f250db8e0f7feb4961c8727118457e27c495ba94d082e51d3baca378726cd110aaf7ded8b9bbfd6a44760cf1d4
languageName: node
linkType: hard

"iconv-lite@npm:^0.7.0":
version: 0.7.2
resolution: "iconv-lite@npm:0.7.2"
Expand Down Expand Up @@ -13997,15 +14024,6 @@ __metadata:
languageName: node
linkType: hard

"image-size@npm:~0.5.0":
version: 0.5.5
resolution: "image-size@npm:0.5.5"
bin:
image-size: bin/image-size.js
checksum: 10c0/655204163af06732f483a9fe7cce9dff4a29b7b2e88f5c957a5852e8143fa750f5e54b1955a2ca83de99c5220dbd680002d0d4e09140b01433520f4d5a0b1f4c
languageName: node
linkType: hard

"immutable@npm:>=5.1.8":
version: 5.1.9
resolution: "immutable@npm:5.1.9"
Expand Down Expand Up @@ -14838,37 +14856,37 @@ __metadata:
languageName: node
linkType: hard

"less@npm:^4.2.0":
version: 4.6.4
resolution: "less@npm:4.6.4"
"less@npm:>=4.7.0":
version: 4.8.1
resolution: "less@npm:4.8.1"
dependencies:
copy-anything: "npm:^3.0.5"
errno: "npm:^0.1.1"
graceful-fs: "npm:^4.1.2"
image-size: "npm:~0.5.0"
make-dir: "npm:^2.1.0"
make-dir: "npm:^5.1.0"
mime: "npm:^1.4.1"
needle: "npm:^3.1.0"
parse-node-version: "npm:^1.0.1"
probe-image-size: "npm:^7.2.3"
source-map: "npm:~0.6.0"
dependenciesMeta:
errno:
optional: true
graceful-fs:
optional: true
image-size:
optional: true
make-dir:
optional: true
mime:
optional: true
needle:
optional: true
probe-image-size:
optional: true
source-map:
optional: true
bin:
lessc: bin/lessc
checksum: 10c0/34fc96e617f1c8b9bff019ffcab6304550d733fdb5daaa4a69dd404d83aa8566c21d8905bbb75f025334875188f38126edd4af10604e9ee634f43f6d41430837
checksum: 10c0/41fbad950e9d5110bd86c94726a57eb771e2dfc6eb82aa687dd153f9f463c8707cb3b4e89144d1617bbf026ff7dc57cea7e7a33dfbe959565c9cc35a9d480808
languageName: node
linkType: hard

Expand Down Expand Up @@ -15206,13 +15224,10 @@ __metadata:
languageName: node
linkType: hard

"make-dir@npm:^2.1.0":
version: 2.1.0
resolution: "make-dir@npm:2.1.0"
dependencies:
pify: "npm:^4.0.1"
semver: "npm:^5.6.0"
checksum: 10c0/ada869944d866229819735bee5548944caef560d7a8536ecbc6536edca28c72add47cc4f6fc39c54fb25d06b58da1f8994cf7d9df7dadea047064749efc085d8
"make-dir@npm:^5.1.0":
version: 5.1.0
resolution: "make-dir@npm:5.1.0"
checksum: 10c0/b8dc9e831e9941db84b63c0ba7dc7c8c7e92704d4fada300fc86293bea6491496b95208d6f98ec78b87f004e26abf143730dd8050920b88ee4b8bbe1eb14d661
languageName: node
linkType: hard

Expand Down Expand Up @@ -16138,7 +16153,14 @@ __metadata:
languageName: node
linkType: hard

"ms@npm:^2.1.3":
"ms@npm:2.0.0":
version: 2.0.0
resolution: "ms@npm:2.0.0"
checksum: 10c0/f8fda810b39fd7255bbdc451c46286e549794fcc700dc9cd1d25658bbc4dc2563a5de6fe7c60f798a16a60c6ceb53f033cb353f493f0cf63e5199b702943159d
languageName: node
linkType: hard

"ms@npm:^2.1.1, ms@npm:^2.1.3":
version: 2.1.3
resolution: "ms@npm:2.1.3"
checksum: 10c0/d924b57e7312b3b63ad21fc5b3dc0af5e78d61a1fc7cfb5457edaf26326bf62be5307cc87ffb6862ef1c2b33b0233cdb5d4f01c4c958cc0d660948b65a287a48
Expand Down Expand Up @@ -16192,12 +16214,12 @@ __metadata:
languageName: node
linkType: hard

"nanoid@npm:^3.3.16":
version: 3.3.16
resolution: "nanoid@npm:3.3.16"
"nanoid@npm:>=3.3.17":
version: 6.0.1
resolution: "nanoid@npm:6.0.1"
bin:
nanoid: bin/nanoid.cjs
checksum: 10c0/bbf2dcffe22d2b62d16de2711752070b539c0f644c7916f823ad6521986b2078cbe524f2d6240f58c46e9141ea0c7b87a029e100c0f7f175228cacaf30e41bba
nanoid: bin/nanoid.js
checksum: 10c0/5b362ad9822388dfebdf655849c76d3539e074d1003fbe6eb5dff8687faf93a9abbb19bdc5d134b9b8599f875f9b091feacfd7099b34b5fef23bc3f5be41dd10
languageName: node
linkType: hard

Expand All @@ -16208,6 +16230,19 @@ __metadata:
languageName: node
linkType: hard

"needle@npm:^2.5.2":
version: 2.9.1
resolution: "needle@npm:2.9.1"
dependencies:
debug: "npm:^3.2.6"
iconv-lite: "npm:^0.4.4"
sax: "npm:^1.2.4"
bin:
needle: ./bin/needle
checksum: 10c0/65a7eaeaf4ca3410de492957474592af9838e02875273d9232ff6cff331393c58a95e48c592bd9a05f575e5bb9b08543d6cfd19eb96595dbd3d7da2c5fe1accb
languageName: node
linkType: hard

"needle@npm:^3.1.0":
version: 3.5.0
resolution: "needle@npm:3.5.0"
Expand Down Expand Up @@ -17026,13 +17061,6 @@ __metadata:
languageName: node
linkType: hard

"pify@npm:^4.0.1":
version: 4.0.1
resolution: "pify@npm:4.0.1"
checksum: 10c0/6f9d404b0d47a965437403c9b90eca8bb2536407f03de165940e62e72c8c8b75adda5516c6b9b23675a5877cc0bcac6bdfb0ef0e39414cd2476d5495da40e7cf
languageName: node
linkType: hard

"possible-typed-array-names@npm:^1.0.0, possible-typed-array-names@npm:^1.1.0":
version: 1.1.0
resolution: "possible-typed-array-names@npm:1.1.0"
Expand Down Expand Up @@ -17181,6 +17209,17 @@ __metadata:
languageName: node
linkType: hard

"probe-image-size@npm:^7.2.3":
version: 7.3.0
resolution: "probe-image-size@npm:7.3.0"
dependencies:
lodash.merge: "npm:^4.6.2"
needle: "npm:^2.5.2"
stream-parser: "npm:~0.3.1"
checksum: 10c0/92a1c11fbb6149c0122852a179a54d9edda9f7a5084e837aa529d30b7a213120771356e72547bb18a4e183c8896b83b53380b232ed0a97594d2d80c97cf9a127
languageName: node
linkType: hard

"proc-log@npm:^6.0.0":
version: 6.1.0
resolution: "proc-log@npm:6.1.0"
Expand Down Expand Up @@ -18229,7 +18268,7 @@ __metadata:
languageName: node
linkType: hard

"safer-buffer@npm:>= 2.1.2 < 3.0.0":
"safer-buffer@npm:>= 2.1.2 < 3, safer-buffer@npm:>= 2.1.2 < 3.0.0":
version: 2.1.2
resolution: "safer-buffer@npm:2.1.2"
checksum: 10c0/7e3c8b2e88a1841c9671094bbaeebd94448111dd90a81a1f606f3f67708a6ec57763b3b47f06da09fc6054193e0e6709e77325415dc8422b04497a8070fa02d4
Expand Down Expand Up @@ -18281,15 +18320,6 @@ __metadata:
languageName: node
linkType: hard

"semver@npm:^5.6.0":
version: 5.7.2
resolution: "semver@npm:5.7.2"
bin:
semver: bin/semver
checksum: 10c0/e4cf10f86f168db772ae95d86ba65b3fd6c5967c94d97c708ccb463b778c2ee53b914cd7167620950fc07faf5a564e6efe903836639e512a1aa15fbc9667fa25
languageName: node
linkType: hard

"semver@npm:^6.3.1":
version: 6.3.1
resolution: "semver@npm:6.3.1"
Expand Down Expand Up @@ -18697,6 +18727,15 @@ __metadata:
languageName: node
linkType: hard

"stream-parser@npm:~0.3.1":
version: 0.3.1
resolution: "stream-parser@npm:0.3.1"
dependencies:
debug: "npm:2"
checksum: 10c0/585508801423bd6c53f6dda9d78e4b743a08ab72e8e2680431fa855ef950e59c849ec2838f2a00c59af655ff8463e90f660f9169a816e63a3ca159cf713bae5c
languageName: node
linkType: hard

"strict-event-emitter@npm:^0.5.1":
version: 0.5.1
resolution: "strict-event-emitter@npm:0.5.1"
Expand Down
Loading