Kayvan Sylvan 5d93f126d4 security: remove cn package to fix string and request vulnerabilities ...

Removes the cn (Chuck Norris jokes) package which was pulling in
vulnerable versions of string and request packages with no patches
available. This resolves 5 Dependabot alerts:
- Alert #52: string package (HIGH) - ReDoS
- Alert #35: string package (HIGH) - ReDoS
- Alert #61: request package (MEDIUM) - SSRF
- Alert #44: request package (MEDIUM) - SSRF
- Alert #38: request package (MEDIUM) - Remote Memory Exposure

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2026-01-25 15:07:41 -08:00

3.3 KiB

Raw Blame History

View Raw