From aaf7d7e47d588b052bae13c6ee0c4ca5a69cebf9 Mon Sep 17 00:00:00 2001 From: gorkem-bwl Date: Thu, 30 Apr 2026 01:46:28 -0400 Subject: [PATCH] chore(deps): bump postcss (transitive) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Patches CVE-2026-41305 (medium — XSS via unescaped in CSS stringify output). Transitive bump within existing semver range; no package.json change. --- client/package-lock.json | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/client/package-lock.json b/client/package-lock.json index 6210918f4..074b7dab7 100644 --- a/client/package-lock.json +++ b/client/package-lock.json @@ -5912,7 +5912,9 @@ } }, "node_modules/postcss": { - "version": "8.5.6", + "version": "8.5.12", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.12.tgz", + "integrity": "sha512-W62t/Se6rA0Az3DfCL0AqJwXuKwBeYg6nOaIgzP+xZ7N5BFCI7DYi1qs6ygUYT6rvfi6t9k65UMLJC+PHZpDAA==", "funding": [ { "type": "opencollective",