mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-08-11 00:30:12 -04:00
Moves react-router-dom/react-router 7.16.0 -> 7.18.1, off the range flagged by GHSA-wrjc-x8rr-h8h6 (open redirect via backslash in Link/ useNavigate), GHSA-h8fp-f39c-q6mh (RSC), and GHSA-337j-9hxr-rhxg (SSR hydration). The latter two need RSC/SSR, neither of which this client-only SPA uses; the open-redirect one is the only reachable path (post-login redirect), already guarded by sanitizeRedirectTarget. Stays within the existing ^7.16.0 caret, no new transitive deps. Rebuilt the static bundle. npm audit now reports 0 vulnerabilities. |
||
|---|---|---|
| .. | ||
| assets | ||
| fonts | ||
| icons | ||
| img | ||
| index.html | ||
| manifest.json | ||
| spoolbuddy_logo_dark.png | ||
| sw-register.js | ||
| sw.js | ||
| vite.svg | ||