Skip to content

Commit e34a2b2

Browse files
zkoppertCopilot
andauthored
fix(deps): override vulnerable transitive KaTeX (#231)
I require KaTeX 0.18.2 or newer for micromark-extension-math to address CVE-2026-103923. The lockfile resolves KaTeX 0.18.10 and its Commander dependency. Signed-off-by: Zack Koppert <zkoppert@github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 4d4fe4c6-b821-4449-99ea-80cd44d5b8f8
1 parent e5a26c5 commit e34a2b2

2 files changed

Lines changed: 13 additions & 8 deletions

File tree

‎package-lock.json‎

Lines changed: 8 additions & 8 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎package.json‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,5 +11,10 @@
1111
"devDependencies": {
1212
"markdownlint-cli2": "^0.23.3",
1313
"prettier": "^3.9.9"
14+
},
15+
"overrides": {
16+
"micromark-extension-math": {
17+
"katex": "^0.18.2"
18+
}
1419
}
1520
}

0 commit comments

Comments
 (0)