Files
langflow/docs/package.json
Janardan Singh Kavia b54bdf318d fix: update security dependencies (#13053)
* chore: update security dependencies

- Update brace-expansion to ^5.0.5 in docs
- Update picomatch to ^4.0.4 in docs
- Update ip-address to ^10.1.1 in frontend
- Update GitPython to >=3.1.48 in backend
- Add protobuf constraint >=6.33.6,<7.0.0 in backend

* chore: address additional CVEs and add security documentation

- Update lodash from deprecated 4.18.0 to 4.17.21
- Add docs/SECURITY_OVERRIDES.md documenting all CVEs
- Revert mem0ai 2.x upgrade due to compatibility issues

* fix: update dependencies to address CVE vulnerabilities

- Update langchain-core to >=1.3.3 (fixes CVE-2026-44843)
- Update GitPython to >=3.1.50 (partially fixes CVE-2026-44243, CVE-2026-44244, GHSA-mv93-w799-cj2w)
- Update pyarrow constraint to >=23.0.1,<24.0.0 (fixes CVE-2026-25087)
- Add override-dependencies for transitive packages:
  - lxml >=6.1.0 (fixes CVE-2026-41066)
  - mako >=1.3.12 (fixes CVE-2026-44307)
  - urllib3 >=2.7.0 (fixes CVE-2026-44431, CVE-2026-44432)
  - python-liquid >=2.2.0 (fixes CVE-2026-45017)

Total: 9 CVEs addressed
Smoke tests: All imports successful, no breaking changes detected

---------

Co-authored-by: Janardan S Kavia <janardanskavia@Janardans-MacBook-Pro.local>
2026-05-12 13:09:53 -04:00

75 lines
1.8 KiB
JSON

{
"name": "langflow-docs",
"version": "0.0.0",
"license": "MIT",
"private": false,
"scripts": {
"clear-docs": "rimraf ./docs/",
"start": "docusaurus start",
"build": "docusaurus build",
"deploy": "docusaurus deploy",
"serve": "docusaurus serve",
"docs:version": "docusaurus docs:version"
},
"dependencies": {
"@code-hike/mdx": "^0.9.0",
"@docusaurus/core": "3.9.2",
"@docusaurus/plugin-client-redirects": "^3.9.2",
"@docusaurus/plugin-google-tag-manager": "^3.9.2",
"@docusaurus/preset-classic": "3.9.2",
"@easyops-cn/docusaurus-search-local": "^0.45.0",
"@mdx-js/react": "^3.0.1",
"@mendable/search": "^0.0.206",
"clsx": "^1.2.1",
"docusaurus-node-polyfills": "^1.0.0",
"docusaurus-plugin-image-zoom": "^2.0.0",
"lucide-react": "^0.460.0",
"prism-react-renderer": "^1.3.5",
"react": "^18.2.0",
"react-dom": "^18.2.0",
"react-player": "^2.10.1",
"raw-loader": "^4.0.2",
"redocusaurus": "^2.5.0",
"rimraf": "^4.1.2",
"tailwindcss": "^3.4.4"
},
"devDependencies": {
"@docusaurus/module-type-aliases": "^3.9.2",
"@tsconfig/docusaurus": "^2.0.3",
"typescript": "^5.2.2"
},
"browserslist": {
"production": [
">0.5%",
"not dead",
"not op_mini all"
],
"development": [
"last 1 chrome version",
"last 1 firefox version",
"last 1 safari version"
]
},
"volta": {
"node": "22.22.0"
},
"overrides": {
"brace-expansion": "^5.0.5",
"picomatch": "^4.0.4",
"lodash": "4.17.21",
"fast-xml-parser": "4.5.4",
"openapi-to-postmanv2": {
"lodash": "4.17.21"
},
"postman-collection": {
"lodash": "4.17.21"
},
"json-schema-resolve-allof": {
"lodash": "4.17.21"
},
"json-refs": {
"lodash": "4.17.21"
}
}
}