Elgato_dark/podman-desktop
1
0
Fork 0
mirror of https://github.com/podman-desktop/podman-desktop synced 2026-04-21 17:47:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

fix: resolve GHSA-39q2-94rc-95cp in dompurify
Some checks are pending
Argos CI Screenshots / take screenshots (push) Waiting to run
Details
Publish codecov report from main branch / Run tests and push coverage result (push) Waiting to run
Details
e2e-kubernetes-tests-main / Run All E2E tests (push) Waiting to run
Details
e2e-tests-main / Run E2E tests - flatpak-build (push) Waiting to run
Details
e2e-tests-main / Run E2E tests - source-build (push) Waiting to run
Details
e2e-tests-main / windows-11-arm update e2e tests - custom-extensions (push) Waiting to run
Details
e2e-tests-main / windows-2025 update e2e tests - custom-extensions (push) Waiting to run
Details
e2e-tests-main / windows-11-arm update e2e tests - vanilla (push) Waiting to run
Details
e2e-tests-main / windows-2025 update e2e tests - vanilla (push) Waiting to run
Details
e2e-tests-main / macos-15-intel update e2e tests (push) Waiting to run
Details
e2e-tests-main / macos-26 update e2e tests (push) Waiting to run
Details
Managed configuration tests / Managed configuration tests - macos-latest (push) Waiting to run
Details
Managed configuration tests / Managed configuration tests - ubuntu-latest (push) Waiting to run
Details
Managed configuration tests / Managed configuration tests - windows-2025 (push) Waiting to run
Details
next build / Tagging (push) Waiting to run
Details
next build / Build / macos-15 (push) Blocked by required conditions
Details
next build / Build / ubuntu-24.04 (push) Blocked by required conditions
Details
next build / Build / windows-2025 (push) Blocked by required conditions
Details
next build / Release (push) Blocked by required conditions
Details
Publish NPM packages to npmjs.com using OIDC / Prepare version info (push) Waiting to run
Details
Publish NPM packages to npmjs.com using OIDC / Publish to npm (push) Blocked by required conditions
Details
Scorecard supply-chain security / Scorecard analysis (push) Waiting to run
Details
Publish Website / Build and deploy website (push) Waiting to run
Details

Browse source 
Upgrade dompurify to satisfy >=3.4.0
Advisory: https://github.com/advisories/GHSA-39q2-94rc-95cp

Co-authored-by: Claude <noreply@anthropic.com>
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
This commit is contained in:
Florent Benoit 2026-04-20 19:29:36 +02:00 committed by Florent BENOIT
parent 67d62bcc36
commit 610b704bf0
2 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
package.json
View file

@ -203,7 +203,7 @@
"serve-handler>path-to-regexp": "^3.3.0",
"express>cookie": "^0.7.0",
"qs": "^6.15.0",
"dompurify@^3": "^3.3.3",
"dompurify@^3": "^3.4.0",
"webpack-dev-server>http-proxy-middleware": "^2.0.9",
"esbuild-register>esbuild": "^0.25.0",
"tsx>esbuild": "^0.25.0",

12
pnpm-lock.yaml
View file

@ -11,7 +11,7 @@ overrides:
serve-handler>path-to-regexp: ^3.3.0
express>cookie: ^0.7.0
qs: ^6.15.0
dompurify@^3: ^3.3.3
dompurify@^3: ^3.4.0
webpack-dev-server>http-proxy-middleware: ^2.0.9
esbuild-register>esbuild: ^0.25.0
tsx>esbuild: ^0.25.0
@ -6573,8 +6573,8 @@ packages:
resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
engines: {node: '>= 4'}
dompurify@3.3.3:
resolution: {integrity: sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==}
dompurify@3.4.0:
resolution: {integrity: sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==}
domutils@2.8.0:
resolution: {integrity: sha512-w96Cjofp72M5IIhpjgobBimYEfoPjx1Vx0BSX9P30WBdZW2WIKU0T1Bd0kz2eNZ9ikjKgHbEyKx8BB6H1L3h3A==}
@ -19084,7 +19084,7 @@ snapshots:
dependencies:
domelementtype: 2.3.0
dompurify@3.3.3:
dompurify@3.4.0:
optionalDependencies:
'@types/trusted-types': 2.0.7
@ -21852,7 +21852,7 @@ snapshots:
d3-sankey: 0.12.3
dagre-d3-es: 7.0.11
dayjs: 1.11.13
dompurify: 3.3.3
dompurify: 3.4.0
katex: 0.16.25
khroma: 2.1.0
lodash-es: 4.18.1
@ -22303,7 +22303,7 @@ snapshots:
monaco-editor@0.55.1:
dependencies:
dompurify: 3.3.3
dompurify: 3.4.0
marked: 14.0.0
moo-color@1.0.3: