From 35daed605f60b84f0fa4e4ead83f6e0173506c99 Mon Sep 17 00:00:00 2001 From: gorkem-bwl Date: Thu, 30 Apr 2026 01:45:33 -0400 Subject: [PATCH] chore(deps): bump flatted (transitive) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Patches CVE-2026-33228 (high — prototype pollution via parse() in flatted). Transitive bump within existing semver range; no package.json change. --- client/package-lock.json | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/client/package-lock.json b/client/package-lock.json index 6210918f4..844b52b22 100644 --- a/client/package-lock.json +++ b/client/package-lock.json @@ -4191,7 +4191,9 @@ } }, "node_modules/flatted": { - "version": "3.3.3", + "version": "3.4.2", + "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz", + "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==", "dev": true, "license": "ISC" },