mirror of
https://github.com/zitadel/zitadel.git
synced 2025-12-07 15:32:02 +00:00
# Which Problems Are Solved
- form-data Math.random() vulnerability
# How the Problems Are Solved
- Overrides the form-data usage in pnpm to a patched version
# Additional Context
CVE ID: https://github.com/advisories/GHSA-fjxv-7rqg-78g4
GHSA ID: https://github.com/advisories/GHSA-fjxv-7rqg-78g4
(cherry picked from commit 9ed0daaf8c)
105 lines
3.4 KiB
JSON
105 lines
3.4 KiB
JSON
{
|
|
"packageManager": "pnpm@10.13.1",
|
|
"name": "@zitadel/login",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "next dev",
|
|
"build": "next build",
|
|
"build:login:standalone": "NEXT_PUBLIC_BASE_PATH=/ui/v2/login NEXT_OUTPUT_MODE=standalone next build",
|
|
"start": "next start",
|
|
"lint": "pnpm run '/^lint:check:.*$/'",
|
|
"lint:check:next": "next lint",
|
|
"lint:check:prettier": "prettier --check .",
|
|
"lint:fix": "prettier --write .",
|
|
"test:unit": "vitest --run",
|
|
"lint-staged": "lint-staged",
|
|
"clean": "rm -rf .turbo && rm -rf node_modules && rm -rf .next",
|
|
"test:integration:login": "wait-on --simultaneous 1 http://localhost:3001/ui/v2/login/verify?userId=221394658884845598&code=abc && cypress run",
|
|
"test:acceptance": "dotenv -e ../login/.env.test.local playwright",
|
|
"test:acceptance:setup": "cd ../.. && make login_test_acceptance_setup_env && NODE_ENV=test turbo run test:acceptance:setup:dev",
|
|
"test:acceptance:setup:dev": "cd ../.. && make login_test_acceptance_setup_dev"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"form-data@>=4.0.0 <4.0.4": ">=4.0.4"
|
|
}
|
|
},
|
|
"git": {
|
|
"pre-commit": "lint-staged"
|
|
},
|
|
"lint-staged": {
|
|
"*": "prettier --write --ignore-unknown"
|
|
},
|
|
"dependencies": {
|
|
"@headlessui/react": "^2.1.9",
|
|
"@heroicons/react": "2.1.3",
|
|
"@radix-ui/react-tooltip": "^1.2.7",
|
|
"@tailwindcss/forms": "0.5.7",
|
|
"@vercel/analytics": "^1.2.2",
|
|
"@zitadel/client": "latest",
|
|
"@zitadel/proto": "latest",
|
|
"clsx": "1.2.1",
|
|
"copy-to-clipboard": "^3.3.3",
|
|
"deepmerge": "^4.3.1",
|
|
"lucide-react": "0.469.0",
|
|
"moment": "^2.29.4",
|
|
"next": "15.4.0-canary.86",
|
|
"next-intl": "^3.25.1",
|
|
"next-themes": "^0.2.1",
|
|
"nice-grpc": "2.0.1",
|
|
"qrcode.react": "^3.1.0",
|
|
"react": "19.1.0",
|
|
"react-dom": "19.1.0",
|
|
"react-hook-form": "7.39.5",
|
|
"tinycolor2": "1.4.2",
|
|
"uuid": "^11.1.0"
|
|
},
|
|
"devDependencies": {
|
|
"@babel/eslint-parser": "^7.23.0",
|
|
"@bufbuild/buf": "^1.53.0",
|
|
"@faker-js/faker": "^9.7.0",
|
|
"@otplib/core": "^12.0.0",
|
|
"@otplib/plugin-crypto": "^12.0.0",
|
|
"@otplib/plugin-thirty-two": "^12.0.0",
|
|
"@playwright/test": "^1.52.0",
|
|
"@testing-library/jest-dom": "^6.6.3",
|
|
"@testing-library/react": "^16.3.0",
|
|
"@types/ms": "2.1.0",
|
|
"@types/node": "^22.14.1",
|
|
"@types/react": "19.1.2",
|
|
"@types/react-dom": "19.1.2",
|
|
"@types/tinycolor2": "1.4.3",
|
|
"@types/uuid": "^10.0.0",
|
|
"@typescript-eslint/eslint-plugin": "^7.0.0",
|
|
"@typescript-eslint/parser": "^7.0.0",
|
|
"@vercel/git-hooks": "1.0.0",
|
|
"@vitejs/plugin-react": "^4.4.1",
|
|
"autoprefixer": "10.4.21",
|
|
"concurrently": "^9.1.2",
|
|
"cypress": "^14.5.2",
|
|
"dotenv-cli": "^8.0.0",
|
|
"env-cmd": "^10.0.0",
|
|
"eslint": "^8.57.0",
|
|
"eslint-config-next": "15.4.0-canary.86",
|
|
"eslint-config-prettier": "^9.1.0",
|
|
"gaxios": "^7.1.0",
|
|
"grpc-tools": "1.13.0",
|
|
"jsdom": "^26.1.0",
|
|
"lint-staged": "15.5.1",
|
|
"make-dir-cli": "4.0.0",
|
|
"nodemon": "^3.1.9",
|
|
"postcss": "8.5.3",
|
|
"prettier": "^3.2.5",
|
|
"prettier-plugin-organize-imports": "^3.2.0",
|
|
"prettier-plugin-tailwindcss": "0.6.11",
|
|
"sass": "^1.87.0",
|
|
"start-server-and-test": "^2.0.11",
|
|
"tailwindcss": "3.4.14",
|
|
"ts-proto": "^2.7.0",
|
|
"typescript": "^5.8.3",
|
|
"vite-tsconfig-paths": "^5.1.4",
|
|
"vitest": "^2.0.0",
|
|
"wait-on": "^7.2.0"
|
|
}
|
|
} |