From cc866ae78ca78347b3da316d37d041982d460cde Mon Sep 17 00:00:00 2001 From: Davide Grilli Date: Sun, 12 Apr 2026 16:27:52 +0200 Subject: [PATCH] fix: aggiorna vite a 6.4.2 (path traversal, arbitrary file read) Co-Authored-By: Claude Sonnet 4.6 --- package-lock.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 3b59bd2..c8e5267 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "biteplan", - "version": "1.0.0", + "version": "1.1.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "biteplan", - "version": "1.0.0", + "version": "1.1.0", "dependencies": { "jsqr": "^1.4.0", "qrcode": "^1.5.4", @@ -3081,9 +3081,9 @@ "dev": true }, "node_modules/vite": { - "version": "6.4.1", - "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.1.tgz", - "integrity": "sha512-+Oxm7q9hDoLMyJOYfUYBuHQo+dkAloi33apOPP56pzj+vsdJDzr+j1NISE5pyaAuKL4A3UD34qd0lx5+kfKp2g==", + "version": "6.4.2", + "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.2.tgz", + "integrity": "sha512-2N/55r4JDJ4gdrCvGgINMy+HH3iRpNIz8K6SFwVsA+JbQScLiC+clmAxBgwiSPgcG9U15QmvqCGWzMbqda5zGQ==", "dev": true, "license": "MIT", "dependencies": {