Skip to content

fix(deps): cierra las vulnerabilidades conocidas de las dependencias npm - #37

Merged
JoniMartin27 merged 1 commit into
mainfrom
fix/vulnerabilidades-2026-10
Oct 25, 2026
Merged

JoniMartin27 merged 1 commit into
mainfrom
fix/vulnerabilidades-2026-10

Conversation

@JoniMartin27

Copy link
Copy Markdown
Owner
  • fastify 5.12.7 (evasión de autenticación por URL mal formada, varias de validación) y fast-uri (SSRF).
  • concurrently 10.0.6 (shell-quote, crítico), vite 8.3.4, vitest 4.1.12 y happy-dom 21.0.4 (solo pruebas; es la única versión que cierra su alto, aunque tiene menos de 7 días).

npm audit: 0. server 169 y web 27 en verde; build correcto. En vivo: / y /api/projects 200; /../../package.json 403. kill_tree.test.js falla en esta máquina igual que en main, sin estos cambios: es del entorno.

🤖 Generated with Claude Code

npm audit queda a 0 en producción y en desarrollo.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

⚖️ Veredicto

✅ No test-gaming signals detected in this diff.

Free static detection by Veredicto. The diff-vs-claim LLM judge + signed report is the Pro tier.

@JoniMartin27
JoniMartin27 merged commit 8168192 into main Oct 25, 2026
8 checks passed
@JoniMartin27
JoniMartin27 deleted the fix/vulnerabilidades-2026-10 branch October 25, 2026 17:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant