fix: graphql uncontrolled resource consumption vulnerability (#15260)
Fixes [Dependabot Alert 73](https://github.com/twentyhq/twenty/security/dependabot/73) - graphql uncontrolled resource consumption vulnerability. Updated the patch version - from 16.8.0 to 16.8.1 - and this patch only touches the issue identified by the alert. <p align="center"> <img width="1175" height="472" alt="image" src="https://github.com/user-attachments/assets/4f809f03-1e63-4412-822c-227712d1e395" /> </p> Manually tested a few mutations, ran test cases, and everything seems to work fine. Not expecting it to break anything. Two files changed in the original patch fix: https://github.com/graphql/graphql-js/commit/8f4c64eb6a7112a929ffeef00caa67529b3f2fcf
This commit is contained in:
+1
-1
@@ -217,7 +217,7 @@
|
||||
"name": "twenty",
|
||||
"packageManager": "yarn@4.9.2",
|
||||
"resolutions": {
|
||||
"graphql": "16.8.0",
|
||||
"graphql": "16.8.1",
|
||||
"type-fest": "4.10.1",
|
||||
"typescript": "5.9.2",
|
||||
"graphql-redis-subscriptions/ioredis": "^5.6.0",
|
||||
|
||||
Reference in New Issue
Block a user