From 46ce9eca3fc64ca575f5236d922874c62cb70341 Mon Sep 17 00:00:00 2001 From: "Abdullah." <125115953+mabdullahabaid@users.noreply.github.com> Date: Thu, 27 Nov 2025 17:49:10 +0500 Subject: [PATCH] fix: node-forge is vulnerable to ASN.1 OID integer truncation (#16124) Resolves [Dependabot Alert 328](https://github.com/twentyhq/twenty/security/dependabot/328). Used `yarn up node-forge --recursive` to bump up the patch version from 1.3.1 to 1.3.2. --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 20e253f4fd..8f45d90cf7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -45840,9 +45840,9 @@ __metadata: linkType: hard "node-forge@npm:^1.3.1": - version: 1.3.1 - resolution: "node-forge@npm:1.3.1" - checksum: 10c0/e882819b251a4321f9fc1d67c85d1501d3004b4ee889af822fd07f64de3d1a8e272ff00b689570af0465d65d6bf5074df9c76e900e0aff23e60b847f2a46fbe8 + version: 1.3.2 + resolution: "node-forge@npm:1.3.2" + checksum: 10c0/1def35652c93a588718a6d0d0b4f33e3e7de283aa6f4c00d01d1605d6ccce23fb3b59bcbfb6434014acd23a251cfcc2736052b406f53d94e1b19c09d289d0176 languageName: node linkType: hard