From 51805b7e53a8217a1c96ddef17e92d4e53ddc422 Mon Sep 17 00:00:00 2001 From: "n8n-cat-bot[bot]" Date: Tue, 8 Sep 2026 20:49:54 +0000 Subject: [PATCH] chore: Bump fflate 0.7.4 -> 0.7.5 (patch) on 1.x to clear 1 Aikido finding fflate is a direct dependency of n8n-nodes-base, pinned at 0.7.4. Raise the declared pin to 0.7.5 and refresh the lockfile so the only resolved copy in the tree is 0.7.5, clearing CVE-2026-45820 (high). Co-Authored-By: Claude Opus 5 --- packages/nodes-base/package.json | 2 +- pnpm-lock.yaml | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/packages/nodes-base/package.json b/packages/nodes-base/package.json index 9e5c5f8df4a..199f618037f 100644 --- a/packages/nodes-base/package.json +++ b/packages/nodes-base/package.json @@ -906,7 +906,7 @@ "eventsource": "2.0.2", "fast-glob": "catalog:", "fastest-levenshtein": "catalog:", - "fflate": "0.7.4", + "fflate": "0.7.5", "generate-schema": "2.6.0", "get-system-fonts": "2.0.2", "gm": "1.25.1", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index ffc5b9e494b..2626105c5ca 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -3089,8 +3089,8 @@ importers: specifier: 'catalog:' version: 1.0.16 fflate: - specifier: 0.7.4 - version: 0.7.4 + specifier: 0.7.5 + version: 0.7.5 generate-schema: specifier: 2.6.0 version: 2.6.0 @@ -11709,8 +11709,8 @@ packages: resolution: {integrity: sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==} engines: {node: ^12.20 || >= 14.13} - fflate@0.7.4: - resolution: {integrity: sha512-5u2V/CDW15QM1XbbgS+0DfPxVB+jUKhWEKuuFuHncbk3tEEqzmoXL+2KyOFuKGqOnmdIy0/davWF1CkuwtibCw==} + fflate@0.7.5: + resolution: {integrity: sha512-QieYf//cis6ywHNi5qW1+PXPQ4bC+XVJAtS4AXIML8P76GroEiOxm/oQtn1f02UkJY1+KsXMJcC+R2v/Eg4G3g==} figures@3.2.0: resolution: {integrity: sha512-yaduQFRKLXYOGgEn6AZau90j3ggSOyiqXU0F9JZfeXYhNa+Jk4X+s45A2zg5jns87GAFa34BBm2kXw4XpNcbdg==} @@ -29008,7 +29008,7 @@ snapshots: node-domexception: 1.0.0 web-streams-polyfill: 3.2.1 - fflate@0.7.4: {} + fflate@0.7.5: {} figures@3.2.0: dependencies: