Skip to content

Commit ac899e2

Browse files
committed
fix(security): address audit findings — meili key, vite CVEs, SQL injection
- S-1: Replace hardcoded "devkey123" Meilisearch master key with auto-generated key persisted to ~/.4dpocket/meili_master_key - S-2: Bump vite from ^8.0.1 to ^8.0.5 (resolved to 8.0.8) fixing 2 HIGH CVEs (file read + fs.deny bypass) - S-3: Fix SQL injection in db reset PostgreSQL path — use psql --set parameter binding instead of f-string interpolation
1 parent bbf3a38 commit ac899e2

3 files changed

Lines changed: 119 additions & 107 deletions

File tree

frontend/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,6 @@
4646
"tailwindcss": "^4.2.2",
4747
"typescript": "~5.9.3",
4848
"typescript-eslint": "^8.57.0",
49-
"vite": "^8.0.1"
49+
"vite": "^8.0.5"
5050
}
5151
}

0 commit comments

Comments
 (0)