Repository navigation

Commit 892f3cc

committed

fix(@angular-devkit/build-angular): update webpack-dev-middleware to 7.4.6

Update `webpack-dev-middleware` to 7.4.6 to address GHSA-g84c-rxfj-3j2c / CVE-2026-76844. The advisory lists versions below 7.4.5 as affected but names 7.4.6 as the first patched release, which contains the fix, so 7.4.5 is updated as well.

1 parent 217033b commit 892f3ccCopy full SHA for 892f3cc

2 files changed

packages/angular_devkit/build_angular
- package.json
pnpm-lock.yaml

`‎packages/angular_devkit/build_angular/package.json‎`

-Original file line number
+Diff line change
     "tree-kill": "1.2.2",
     "tslib": "2.8.1",
     "webpack": "5.112.0",
 -    "webpack-dev-middleware": "7.4.2",
 +    "webpack-dev-middleware": "7.4.6",
     "webpack-dev-server": "5.2.6",
     "webpack-merge": "6.0.1",
     "webpack-subresource-integrity": "5.1.0"

`‎pnpm-lock.yaml‎`

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Comments

(0)