Skip to content

security: vulnerability remediation - #150

Open
kernel-internal[bot] wants to merge 1 commit into
mainfrom
security/vuln-remediation
Open

security: vulnerability remediation#150
kernel-internal[bot] wants to merge 1 commit into
mainfrom
security/vuln-remediation

Conversation

@kernel-internal

@kernel-internal kernel-internal Bot commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

Vulnerability Remediation

This PR was generated by the Socket-centric vulnerability remediation workflow. Review the planned dependency changes and confirmation evidence before merging.

Fixed

CVE/GHSA Package Ecosystem Old Version New Version Manifest Confirmation
GHSA-4x5r-pxfx-6jf8 %40babel/core, jest None 29.7.0 7.29.6 confirmed

Not Included

  • Deferred by batch limit: 12 advisories. They will be considered by future runs.
  • Other deferred scanner findings: 1.
  • Unconfirmed attempted fixes: 0.
Deferred details
CVE/GHSA Package Reason
Unavailable from detector highlight.js Non-CVE alert is not handled by dependency remediation.

@ulziibay-kernel ulziibay-kernel left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verified the bump against the advisory's first patched version; rebuilt on current main and confirmed the toolchain lock/build is clean. CI green.

@ulziibay-kernel ulziibay-kernel left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving: single-advisory dependency bump, lockfile/manifest only, no source changes.

@kernel-internal
kernel-internal Bot force-pushed the security/vuln-remediation branch from c5654e7 to 214c81a Compare September 9, 2026 03:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant