From b41bd17cafd22330435a94ce50c813570a7bc8fd Mon Sep 17 00:00:00 2001 From: Kayvan Sylvan Date: Sun, 25 Jan 2026 14:44:08 -0800 Subject: [PATCH] chore: incoming 1971 changelog entry --- cmd/generate_changelog/incoming/1971.txt | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 cmd/generate_changelog/incoming/1971.txt diff --git a/cmd/generate_changelog/incoming/1971.txt b/cmd/generate_changelog/incoming/1971.txt new file mode 100644 index 00000000..073e4fb0 --- /dev/null +++ b/cmd/generate_changelog/incoming/1971.txt @@ -0,0 +1,7 @@ +### PR [#1971](https://github.com/danielmiessler/Fabric/pull/1971) by [ksylvan](https://github.com/ksylvan): Security fix high medium low priority dependabot alerts for npm dependencies + +- Fixed medium severity esbuild vulnerability that allowed websites to send requests to development server and read responses +- Updated esbuild from vulnerable version 0.21.5 to secure version 0.27.2 +- Fixed low severity @eslint/plugin-kit ReDoS vulnerability through ConfigCommentParser +- Updated @eslint/plugin-kit from vulnerable version 0.2.8 to secure version 0.5.1 +- Verified all builds and tests pass successfully after security updates