From 223f27671e5dd4b580c23aee35e73951fcaa5dd8 Mon Sep 17 00:00:00 2001 From: "godugu@progress.com" Date: Mon, 17 Aug 2026 18:55:34 -0700 Subject: [PATCH] MLE-31764: [HIGH] BDSA-2026-24772 in nanoid v3.3.12 --- package-lock.json | 2 +- package.json | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/package-lock.json b/package-lock.json index 8bf04162..df94e097 100644 --- a/package-lock.json +++ b/package-lock.json @@ -38,7 +38,7 @@ "mocha": "11.7.5", "mocha-junit-reporter": "2.2.1", "moment": "2.30.1", - "sanitize-html": "^2.17.6", + "sanitize-html": "2.17.6", "should": "13.2.3", "stream-to-array": "2.3.0", "typescript": "5.7.2" diff --git a/package.json b/package.json index 479d667c..f34be307 100644 --- a/package.json +++ b/package.json @@ -73,7 +73,7 @@ "mocha": "11.7.5", "mocha-junit-reporter": "2.2.1", "moment": "2.30.1", - "sanitize-html": "^2.17.6", + "sanitize-html": "2.17.6", "should": "13.2.3", "stream-to-array": "2.3.0", "typescript": "5.7.2" @@ -99,6 +99,7 @@ "js-yaml": "4.3.1", "markdown-it": "14.3.0", "minimatch": "10.2.4", + "nanoid": "3.3.17", "semver": "7.5.3", "serialize-javascript": "7.0.5", "strip-ansi": "6.0.0",