thePR0M3TH3AN/TORCH
1
0 Fork 0
mirror of https://github.com/PR0M3TH3AN/TORCH.git synced 2026-10-27 07:51:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
9fb290864dc406291339ff8175ed656cf681b4a0
TORCH/reports/security/deps-report-2026-02-27.md
T
google-labs-jules[bot]andPR0M3TH3AN 841cb6c2e2 Run daily deps-security-agent workflow 
- Performed security audit with `npm audit` and `npm outdated`
- Resolved minimatch vulnerability via `npm audit fix`
- Updated nostr-tools to 2.23.2
- Generated daily security report and run artifacts
- Completed scheduler task log and memory updates

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-27 01:25:56 +00:00

622 B
Raw Blame History

Dependency Security Report - 2026-02-27

Summary

  • High Severity Vulnerabilities: 1 (minimatch)
  • Outdated Packages: 1 (nostr-tools)

Vulnerabilities

High

  • minimatch: ReDoS vulnerabilities.
    • Fix available: Yes (Update to >=10.2.3)
    • Affected versions: 10.0.0 - 10.2.2

Outdated Packages

Minor/Patch

  • nostr-tools: 2.23.1 -> 2.23.2 (Patch)

Decisions

  • minimatch: Update recommended via npm audit fix or direct upgrade.
  • nostr-tools: Patch update is safe to attempt.

Actions

  • Attempt npm audit fix for minimatch.
  • Attempt upgrade of nostr-tools to 2.23.2.
Reference in new issue View Git Blame Copy Permalink