LocalAI

0 Fork 0

mirror of https://github.com/mudler/LocalAI.git synced 2026-09-12 14:22:11 -04:00

Files

T

Anupam Mediratta ff6043b811 fix: upgrade react-router to 7.18.2, 8.3.0 (GHSA-qwww-vcr4-c8h2) (#11644 )

* fix: GHSA-qwww-vcr4-c8h2 security vulnerability

Automated dependency upgrade by OrbisAI Security

Signed-off-by: anupamme <mediratta@gmail.com>

* fix: upgrade react-router-dom to 7.18.2 to fully remediate GHSA-qwww-vcr4-c8h2

The prior fix pinned react-router@7.18.2 directly but left react-router-dom
at ^7.18.1, which bun resolved to 7.18.1. That package bundles its own
react-router@7.18.1 sub-dep, leaving the vulnerable version in bun.lock
via the react-router-dom/react-router scoped resolution. Pinning
react-router-dom to 7.18.2 and regenerating the lockfile removes all
7.18.1 resolutions.

Assisted-by: Claude Code:claude-sonnet-4-6
Signed-off-by: Anupam Mediratta <mediratta@gmail.com>

---------

Signed-off-by: anupamme <mediratta@gmail.com>
Signed-off-by: Anupam Mediratta <mediratta@gmail.com>

2026-08-21 08:41:23 +02:00

auth

fix(auth): protect HTTP routes by default (#11602 )

2026-08-19 20:49:19 +02:00

endpoints

Revert "chore(tests): Avoid network, sleep and more during tests" (#11601 )

2026-08-19 16:39:39 +02:00

middleware

feat(chat): add end-to-end context compression (#11556 )

2026-08-18 11:31:03 +00:00

react-ui

fix: upgrade react-router to 7.18.2, 8.3.0 (GHSA-qwww-vcr4-c8h2) (#11644 )