From 0359e56d21cdfd5c345715a0a38fa2d71418ac53 Mon Sep 17 00:00:00 2001 From: ScriptedAlchemy Date: Fri, 14 Aug 2026 22:43:45 +0000 Subject: [PATCH] fix(dts-plugin): update ws to 8.21.3 --- .changeset/secure-websocket-client.md | 5 +++ packages/dts-plugin/package.json | 2 +- pnpm-lock.yaml | 59 ++++++++++----------------- 3 files changed, 28 insertions(+), 38 deletions(-) create mode 100644 .changeset/secure-websocket-client.md diff --git a/.changeset/secure-websocket-client.md b/.changeset/secure-websocket-client.md new file mode 100644 index 00000000000..0d2c56790e3 --- /dev/null +++ b/.changeset/secure-websocket-client.md @@ -0,0 +1,5 @@ +--- +"@module-federation/dts-plugin": patch +--- + +Update ws to 8.21.3 to address CVE-2026-62389. diff --git a/packages/dts-plugin/package.json b/packages/dts-plugin/package.json index 2370ba7f6a6..4bf774c330c 100644 --- a/packages/dts-plugin/package.json +++ b/packages/dts-plugin/package.json @@ -72,7 +72,7 @@ "adm-zip": "0.6.0", "isomorphic-ws": "5.0.0", "undici": "7.29.0", - "ws": "8.21.0" + "ws": "8.21.3" }, "devDependencies": { "@module-federation/runtime": "workspace:*", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 1be98937950..4d4d99dc669 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -3362,13 +3362,13 @@ importers: version: 0.6.0 isomorphic-ws: specifier: 5.0.0 - version: 5.0.0(ws@8.21.0) + version: 5.0.0(ws@8.21.3) undici: specifier: 7.29.0 version: 7.29.0 ws: - specifier: 8.21.0 - version: 8.21.0 + specifier: 8.21.3 + version: 8.21.3 devDependencies: '@module-federation/runtime': specifier: workspace:* @@ -28593,18 +28593,6 @@ packages: utf-8-validate: optional: true - ws@8.21.0: - resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==} - engines: {node: '>=10.0.0'} - peerDependencies: - bufferutil: ^4.0.1 - utf-8-validate: '>=5.0.2' - peerDependenciesMeta: - bufferutil: - optional: true - utf-8-validate: - optional: true - ws@8.21.2: resolution: {integrity: sha512-54dMVAo4WIe6SKy3vBgN+9bJZqqQ8IMRevAkOLQALhi49qkkQDQfWdAZ8KQlXiEabw88ARXXdUrlvtbKQX+aKw==} engines: {node: '>=10.0.0'} @@ -35044,7 +35032,7 @@ snapshots: http-compression: 1.0.6 minimatch: 3.1.5 path-to-regexp: 6.3.0 - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: ts-node: 10.9.2(@swc/core@1.15.41(@swc/helpers@0.5.17))(@types/node@26.2.0)(typescript@7.0.2) tsconfig-paths: 4.2.0 @@ -35073,7 +35061,7 @@ snapshots: http-compression: 1.0.6 minimatch: 3.1.5 path-to-regexp: 6.3.0 - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: ts-node: 10.9.2(@swc/core@1.15.41(@swc/helpers@0.5.19))(@types/node@20.19.5)(typescript@7.0.2) tsconfig-paths: 4.2.0 @@ -35100,7 +35088,7 @@ snapshots: http-compression: 1.0.6 minimatch: 3.1.5 path-to-regexp: 6.3.0 - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: ts-node: 10.9.2(@swc/core@1.15.41(@swc/helpers@0.5.17))(@types/node@26.2.0)(typescript@7.0.2) tsconfig-paths: 4.2.0 @@ -35127,7 +35115,7 @@ snapshots: http-compression: 1.0.6 minimatch: 3.1.5 path-to-regexp: 6.3.0 - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: ts-node: 10.9.2(@swc/core@1.15.41(@swc/helpers@0.5.23))(@types/node@20.19.5)(typescript@7.0.2) tsconfig-paths: 3.14.2 @@ -35154,7 +35142,7 @@ snapshots: http-compression: 1.0.6 minimatch: 3.1.5 path-to-regexp: 6.3.0 - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: ts-node: 10.9.2(@swc/core@1.15.41(@swc/helpers@0.5.23))(@types/node@20.19.5)(typescript@7.0.2) tsconfig-paths: 4.2.0 @@ -41494,7 +41482,7 @@ snapshots: p-retry: 6.2.1 webpack-dev-middleware: 7.4.5(webpack@5.104.1(@swc/core@1.7.26(@swc/helpers@0.5.13))(esbuild@0.28.1)(webpack-cli@5.1.4)) webpack-dev-server: 5.2.0(webpack-cli@5.1.4)(webpack@5.104.1) - ws: 8.21.0 + ws: 8.21.3 transitivePeerDependencies: - '@types/express' - bufferutil @@ -42216,7 +42204,7 @@ snapshots: util: 0.12.5 util-deprecate: 1.0.2 watchpack: 2.5.1 - ws: 8.21.0 + ws: 8.21.3 transitivePeerDependencies: - bufferutil - encoding @@ -42245,7 +42233,7 @@ snapshots: recast: 0.23.11 semver: 7.6.3 util: 0.12.5 - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: prettier: 3.8.1 transitivePeerDependencies: @@ -42266,7 +42254,7 @@ snapshots: recast: 0.23.11 semver: 7.8.5 util: 0.12.5 - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: prettier: 3.8.1 transitivePeerDependencies: @@ -52281,9 +52269,9 @@ snapshots: dependencies: ws: 8.18.0 - isomorphic-ws@5.0.0(ws@8.21.0): + isomorphic-ws@5.0.0(ws@8.21.3): dependencies: - ws: 8.21.0 + ws: 8.21.3 isstream@0.1.2: {} @@ -52982,7 +52970,7 @@ snapshots: whatwg-encoding: 2.0.0 whatwg-mimetype: 3.0.0 whatwg-url: 11.0.0 - ws: 8.21.0 + ws: 8.21.3 xml-name-validator: 4.0.0 transitivePeerDependencies: - bufferutil @@ -56758,7 +56746,7 @@ snapshots: devtools-protocol: 0.0.1638949 typed-query-selector: 2.12.2 webdriver-bidi-protocol: 0.4.2 - ws: 8.21.0 + ws: 8.21.3 transitivePeerDependencies: - bufferutil - proxy-agent @@ -63448,7 +63436,7 @@ snapshots: sockjs: 0.3.24 spdy: 4.0.2 webpack-dev-middleware: 7.4.5(webpack@5.104.1(@swc/core@1.7.26(@swc/helpers@0.5.13))(esbuild@0.28.1)(webpack-cli@5.1.4)) - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: webpack: 5.104.1(@swc/core@1.7.26(@swc/helpers@0.5.13))(esbuild@0.28.1)(webpack-cli@5.1.4) webpack-cli: 5.1.4(webpack-dev-server@5.2.3)(webpack@5.104.1) @@ -63487,7 +63475,7 @@ snapshots: sockjs: 0.3.24 spdy: 4.0.2 webpack-dev-middleware: 7.4.5(webpack@5.104.1(@swc/core@1.15.41(@swc/helpers@0.5.17))(esbuild@0.25.5)(webpack-cli@5.1.4)) - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: webpack: 5.104.1(@swc/core@1.15.41(@swc/helpers@0.5.17))(esbuild@0.25.5)(webpack-cli@5.1.4) webpack-cli: 5.1.4(webpack-dev-server@5.2.3)(webpack@5.104.1) @@ -63527,7 +63515,7 @@ snapshots: sockjs: 0.3.24 spdy: 4.0.2 webpack-dev-middleware: 7.4.5(webpack@5.104.1(@swc/core@1.15.41(@swc/helpers@0.5.19))(esbuild@0.18.20)(webpack-cli@5.1.4)) - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: webpack: 5.104.1(@swc/core@1.15.41(@swc/helpers@0.5.19))(esbuild@0.18.20)(webpack-cli@5.1.4) webpack-cli: 5.1.4(webpack-dev-server@5.2.3)(webpack@5.104.1) @@ -63567,7 +63555,7 @@ snapshots: sockjs: 0.3.24 spdy: 4.0.2 webpack-dev-middleware: 7.4.5(webpack@5.104.1(@swc/core@1.15.41(@swc/helpers@0.5.23))(esbuild@0.25.5)(webpack-cli@5.1.4)) - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: webpack: 5.104.1(@swc/core@1.15.41(@swc/helpers@0.5.23))(esbuild@0.25.5)(webpack-cli@5.1.4) webpack-cli: 5.1.4(webpack-dev-server@5.2.3)(webpack@5.104.1) @@ -63606,7 +63594,7 @@ snapshots: sockjs: 0.3.24 spdy: 4.0.2 webpack-dev-middleware: 7.4.5(webpack@5.104.1(@swc/core@1.7.26(@swc/helpers@0.5.13))(esbuild@0.28.1)(webpack-cli@5.1.4)) - ws: 8.21.0 + ws: 8.21.3 optionalDependencies: webpack: 5.104.1(@swc/core@1.7.26(@swc/helpers@0.5.13))(esbuild@0.28.1)(webpack-cli@5.1.4) webpack-cli: 5.1.4(webpack-dev-server@5.2.3)(webpack@5.104.1) @@ -64199,12 +64187,9 @@ snapshots: ws@8.18.0: {} - ws@8.21.0: {} - ws@8.21.2: {} - ws@8.21.3: - optional: true + ws@8.21.3: {} wsl-utils@0.1.0: dependencies: