Repository navigation
chore(deps): zod 4.6.7 and rustls 0.23.46 for the two fixable Dependabot alerts - #224
Merged
Merged
Conversation
…bot alerts GHSA-mrhx-c7xc-m3w5 (high): zod < 4.6.6 accumulates one issue per failing element of an unconstrained array, so an oversized array exhausts memory. packages/mcp used zod 3.25.76 for its tool input schemas (several are z.array(z.string()) with no cap); 3.x has no patched release, so the MCP package moves to ^4.6.7. The MCP SDK accepts ^3.25 || ^4 and resolves to the same copy now: the lockfile holds one zod, and the nested 3.25.76 the SDK used to carry is gone. Every z.* call the server makes exists unchanged in 4. GHSA-2mjx-qc3c-rqvc (medium): rustls 0.23.13–0.23.44 accepted TLS 1.3 handshake messages at the wrong encryption level. It reaches the desktop app through the updater's reqwest; cargo update -p rustls takes 0.23.46. GHSA-wrw7-89jp-8q8g (glib < 0.20, Linux only) stays open: glib 0.18 comes through tauri 2's GTK bindings (tray-icon, muda, tao, webkit2gtk) and cannot move without a Tauri major. Verified: typecheck, lint, 1105 tests, smoke, build:pkg (swarm-mcp bundles), cargo check on the desktop crate. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Validates the three open Dependabot alerts and fixes the two that can be fixed.
< 4.6.6inpackages/mcpz.array(z.string())with no cap, the exact shape the advisory names. 3.x has no patched release, so the package moves to^4.6.7; the SDK accepts^3.25 || ^4and now shares that single copy (the nested 3.25.76 it carried is gone from the lockfile). Exposure was local: the inputs arrive over stdio from the Claude Code process on the same machine.0.23.13–0.23.44in the desktop cratecargo update -p rustls→ 0.23.46. The advisory itself notes the transcript stays authenticated, so a network attacker cannot alter or complete a handshake.< 0.20in the desktop crateVariantStrIter, which nothing in this app calls. Leave open or dismiss as "no fix available".Verification: typecheck · lint · test (1105 pass) · smoke · build:pkg (the MCP bin bundles) ·
cargo checkon the desktop crate with the new rustls.🤖 Generated with Claude Code