fix: bump transitive uuid dependency to patched version

Uuid 8.3.2, pulled in transitively via docusaurus/core,
docusaurus/preset-classic, and docusaurus-search-local, is
affected by a missing buffer bounds check in v3/v5/v6 when a
buffer is provided. Force resolution to >=11.1.1.

Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
This commit is contained in:
Marco Nenciarini 2026-07-17 11:24:18 +02:00
parent e9cacecd10
commit 9445cb145e
No known key found for this signature in database
GPG Key ID: 589F03F01BA55038
2 changed files with 6 additions and 5 deletions

View File

@ -47,6 +47,7 @@
}, },
"resolutions": { "resolutions": {
"webpackbar": "^7.0.0", "webpackbar": "^7.0.0",
"serialize-javascript": ">=7.0.5" "serialize-javascript": ">=7.0.5",
"uuid": ">=11.1.1"
} }
} }

View File

@ -9215,10 +9215,10 @@ utils-merge@1.0.1:
resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713" resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713"
integrity sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA== integrity sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==
uuid@^8.3.2: uuid@>=11.1.1, uuid@^8.3.2:
version "8.3.2" version "14.0.1"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-8.3.2.tgz#80d5b5ced271bb9af6c445f21a1a04c606cefbe2" resolved "https://registry.yarnpkg.com/uuid/-/uuid-14.0.1.tgz#8a5975b3e038902bfd169a10b5202f5ec0cf3faf"
integrity sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg== integrity sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==
value-equal@^1.0.1: value-equal@^1.0.1:
version "1.0.1" version "1.0.1"