From ae04224bc6ed2306190bc0cb7bb5afa05da01a32 Mon Sep 17 00:00:00 2001 From: anupamme Date: Wed, 12 Aug 2026 18:35:18 +0000 Subject: [PATCH 1/2] fix: CVE-2026-9277 security vulnerability Automated dependency upgrade by OrbisAI Security Signed-off-by: Anupam Mediratta --- package-lock.json | 15 ++++++++------- package.json | 5 ++++- 2 files changed, 12 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index f5affdf7..6a5b2571 100644 --- a/package-lock.json +++ b/package-lock.json @@ -17163,9 +17163,10 @@ } }, "node_modules/shell-quote": { - "version": "1.8.3", - "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.3.tgz", - "integrity": "sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw==", + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz", + "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==", + "license": "MIT", "engines": { "node": ">= 0.4" }, @@ -26532,7 +26533,7 @@ "integrity": "sha512-D7dBRJo/qcGX9xlvt/6wUYzQxjh5G1RvZPgPv8vi4KRU99DVQL/oW7tnVOCCTm2HGeo3C5HvGE5Yrh6UBoZ0vA==", "requires": { "picocolors": "^1.0.0", - "shell-quote": "^1.8.1" + "shell-quote": "1.9.0" } }, "leven": { @@ -30581,9 +30582,9 @@ "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==" }, "shell-quote": { - "version": "1.8.3", - "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.3.tgz", - "integrity": "sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw==" + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz", + "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==" }, "side-channel": { "version": "1.1.0", diff --git a/package.json b/package.json index 03c0b6de..34b255b3 100644 --- a/package.json +++ b/package.json @@ -83,5 +83,8 @@ "proseWrap": "always", "singleQuote": true }, - "homepage": "https://contribute-cncf-io.netlify.app/" + "homepage": "https://contribute-cncf-io.netlify.app/", + "overrides": { + "shell-quote": "1.9.0" + } } From a62e4e95b250e344d28e0377dba3127bb89b621c Mon Sep 17 00:00:00 2001 From: anupamme Date: Thu, 13 Aug 2026 19:20:40 +0000 Subject: [PATCH 2/2] Address review feedback (1 comments) --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6a5b2571..2fccf2d1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -17163,9 +17163,9 @@ } }, "node_modules/shell-quote": { - "version": "1.9.0", - "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz", - "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==", + "version": "1.8.4", + "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.4.tgz", + "integrity": "sha512-35BZQTggNNminFAX3PX4BB+AZH3IfiwSGnFm6xwXERBMkL5ABFnLqHBm9wnfeAENirkH9y/pDMoGi7HYoB1YEA==", "license": "MIT", "engines": { "node": ">= 0.4" @@ -26533,7 +26533,7 @@ "integrity": "sha512-D7dBRJo/qcGX9xlvt/6wUYzQxjh5G1RvZPgPv8vi4KRU99DVQL/oW7tnVOCCTm2HGeo3C5HvGE5Yrh6UBoZ0vA==", "requires": { "picocolors": "^1.0.0", - "shell-quote": "1.9.0" + "shell-quote": "1.8.4" } }, "leven": { @@ -30582,9 +30582,9 @@ "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==" }, "shell-quote": { - "version": "1.9.0", - "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz", - "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==" + "version": "1.8.4", + "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.4.tgz", + "integrity": "sha512-35BZQTggNNminFAX3PX4BB+AZH3IfiwSGnFm6xwXERBMkL5ABFnLqHBm9wnfeAENirkH9y/pDMoGi7HYoB1YEA==" }, "side-channel": { "version": "1.1.0", diff --git a/package.json b/package.json index 34b255b3..90f70077 100644 --- a/package.json +++ b/package.json @@ -85,6 +85,6 @@ }, "homepage": "https://contribute-cncf-io.netlify.app/", "overrides": { - "shell-quote": "1.9.0" + "shell-quote": "1.8.4" } }