Files
xinfra/frontend/package.json
T
Gmarker689 a974dd03cb fix: upgrade vite to 6.4.3 to fix launch-editor command injection and fs.deny bypass vulnerabilities
- Fixes Dependabot alert #7 (GHSA-c27g-q93r-2cwf): launch-editor command injection via crafted request on Windows, patched in vite >= 5.4.9
- Fixes Dependabot alert #8 (GHSA-fx2h-pf6j-xcff): server.fs.deny bypass on Windows alternate paths, patched in vite >= 6.4.3
- Upgraded @vitejs/plugin-vue to ^5.2.4 for vite 6 compatibility
- Upgraded vue-tsc to ^2.2.12 for vite 6 compatibility
2026-07-22 16:22:01 +08:00

28 lines
611 B
JSON

{
"name": "xinfra-frontend",
"version": "0.1.0",
"private": true,
"type": "module",
"scripts": {
"dev": "vite",
"build": "vue-tsc && vite build",
"preview": "vite preview"
},
"dependencies": {
"vue": "^3.3.4",
"vue-router": "^4.2.4",
"pinia": "^2.1.4",
"element-plus": "^2.3.12",
"@element-plus/icons-vue": "^2.1.0",
"axios": "^1.5.0"
},
"devDependencies": {
"@vitejs/plugin-vue": "^5.2.4",
"typescript": "^5.2.2",
"vite": "^6.4.3",
"vue-tsc": "^2.2.12",
"unplugin-auto-import": "^0.16.6",
"unplugin-vue-components": "^0.25.2"
}
}