mirror of
https://github.com/pezkuwichain/pezkuwi-ui.git
synced 2026-10-20 18:56:22 +00:00
Satoshi Qazi Muhammed
513467c1df
sprintf-js, fast-xml-parser and image-size all came from the react-native 0.73 dev dependency (its CLI 12 and metro 0.80); none has a fix those versions accept. react-native 0.87 no longer depends on the CLI and uses metro 0.87. vue-identicon builds against vue 3 now; at run time it already supports both 2 and 3 (adaptVNodeAttrs) and its peer range stays >= 2.7. The vue 2 advisory is fixed only in vue 3. braces resolves to @pezkuwi/braces 3.0.4: braces 3.0.3, the latest upstream release, has an open advisory with no fixed version (CVE-2026-93687, stack exhaustion through deeply nested patterns); the fork rejects nesting deeper than maxDepth (500) with a SyntaxError.