(ofbiz-plugins) branch trunk updated: Fixed: Vulnerable source-map-js in example/vite-react-app flagged by Dependabot security alert

[mr...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

mridulpathak pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-plugins.git


The following commit(s) were added to refs/heads/trunk by this push:
     new c3cdd6037 Fixed: Vulnerable source-map-js in example/vite-react-app flagged by Dependabot security alert
c3cdd6037 is described below

commit c3cdd60372a751fa4bbef9fb4dc5865eaac964da
Author: Mridul Pathak <mr...@gmail.com>
AuthorDate: Fri Oct 9 12:26:05 2026 +0530

    Fixed: Vulnerable source-map-js in example/vite-react-app flagged by Dependabot security alert
    
    Updated the lockfile entry for source-map-js from 1.2.1 to 1.2.2, fixing an event-loop denial of service through indexed source-map section offsets. The dependency is pulled in transitively by postcss, whose declared range already permits the fixed version, so only the lockfile needed refreshing.
---
 example/vite-react-app/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/example/vite-react-app/package-lock.json b/example/vite-react-app/package-lock.json
index 3f32fe1b0..57b062730 100644
--- a/example/vite-react-app/package-lock.json
+++ b/example/vite-react-app/package-lock.json
@@ -1168,9 +1168,9 @@
       "license": "MIT"
     },
     "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
       "dev": true,
       "license": "BSD-3-Clause",
       "engines": {