mirror of
https://github.com/pezkuwichain/pezkuwi-telemetry.git
synced 2026-11-08 08:41:07 +00:00
sockjs 0.3.24 (webpack-dev-server) asks for uuid ^8.3.2, which falls in
GHSA-w5hq-g745-h8pq (missing buffer bounds check in v3/v5/v6, fixed only
in 11.1.1). sockjs calls nothing but require('uuid').v4() for session ids,
and 11.x still ships a CommonJS build, so the override is scoped to sockjs.
Dev server only; nothing reaches the production bundle.