From 9d8a793aaba5430bfff9f4b51f78eee9c4572c9a Mon Sep 17 00:00:00 2001 From: anupamme Date: Tue, 28 Jul 2026 06:21:50 +0000 Subject: [PATCH] fix: CVE-2025-9287 security vulnerability Automated dependency upgrade by OrbisAI Security --- package-lock.json | 15 ++++++++++----- package.json | 1 + 2 files changed, 11 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 3d53429..65e4883 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10,6 +10,7 @@ "license": "ISC", "dependencies": { "browserify": "^17.0.0", + "cipher-base": "^1.0.5", "crypto-js": "^4.2.0", "engify": "^0.0.4", "js-md5": "^0.8.3", @@ -448,12 +449,16 @@ } }, "node_modules/cipher-base": { - "version": "1.0.4", - "resolved": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.4.tgz", - "integrity": "sha512-Kkht5ye6ZGmwv40uUDZztayT2ThLQGfnj/T71N/XzeZeo3nf8foyW7zGTsPYkEya3m5f3cAypH+qe7YOrM1U2Q==", + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.5.tgz", + "integrity": "sha512-xq7ICKB4TMHUx7Tz1L9O2SGKOhYMOTR32oir45Bq28/AQTpHogKgHcoYFSdRbMtddl+ozNXfXY9jWcgYKmde0w==", + "license": "MIT", "dependencies": { - "inherits": "^2.0.1", - "safe-buffer": "^5.0.1" + "inherits": "^2.0.4", + "safe-buffer": "^5.2.1" + }, + "engines": { + "node": ">= 0.10" } }, "node_modules/combine-source-map": { diff --git a/package.json b/package.json index cdffc49..3c058fc 100644 --- a/package.json +++ b/package.json @@ -14,6 +14,7 @@ "license": "ISC", "dependencies": { "browserify": "^17.0.0", + "cipher-base": "^1.0.5", "crypto-js": "^4.2.0", "engify": "^0.0.4", "js-md5": "^0.8.3",