Abdullah. 60ed9b53f4 fix: vercel’s AI SDK's filetype whitelists can be bypassed when uploading files (#15874) ...

Resolves [Dependabot Alert
301](https://github.com/twentyhq/twenty/security/dependabot/301).

Locked the version of "ai" at 5.0.52 in order to stop it from bumping to
5.0.93 directly when the ^ is introduced since it breaks the code across
multiple files.

2025-11-17 18:03:45 +00:00

..

twenty-apps

Dynamic grql api wrapper on application sync (#15791)

2025-11-17 14:46:59 +01:00

twenty-cli

Dynamic grql api wrapper on application sync (#15791)

2025-11-17 14:46:59 +01:00

twenty-docker

Upgrade NestJS from 10.x to 11.x (#15836)

2025-11-16 18:20:06 +01:00

twenty-docs

docs: localize navigation tabs and groups for supported locales (#15811)

2025-11-14 22:03:54 +01:00

twenty-e2e-testing

fix: playwright downloads and installs browsers without verifying the authenticity of the SSL certificate (#15843)

2025-11-17 08:16:56 +01:00

twenty-emails

i18n - translations (#15803)

2025-11-13 17:12:39 +01:00

twenty-front

fix: vercel’s AI SDK's filetype whitelists can be bypassed when uploading files (#15874)

2025-11-17 18:03:45 +00:00

twenty-sdk

Dynamic grql api wrapper on application sync (#15791)

2025-11-17 14:46:59 +01:00

twenty-server

fix: vercel’s AI SDK's filetype whitelists can be bypassed when uploading files (#15874)

2025-11-17 18:03:45 +00:00

twenty-shared

Twenty-shared tests parses decorator (#15765)

2025-11-13 16:06:04 +00:00

twenty-ui

fix: minor color changes (#15616)

2025-11-13 10:00:28 +00:00

twenty-utils

fix: prototype pollution vulnerability in parse-git-config (#15242)

2025-10-22 11:42:24 +02:00

twenty-website

removing the picture of morph in the lab (#15787)

2025-11-13 13:35:27 +01:00

twenty-zapier

Revert "fix: tmp allows arbitrary temporary file / directory write via symbolic link dir parameter" (#15539)

2025-11-03 11:42:28 +01:00