mirror of
https://github.com/Dvorinka/Containr.git
synced 2026-10-28 07:41:27 +00:00
Tomas DvorakandDevin
a083c30d76
- CVE-2026-53514 (HIGH): better-auth <1.6.11 vulnerable to unverified-email invitation acceptance; pinned 1.6.33 (1.7.x breaks the migration introspection + schema check on this setup) - qs override to >=6.16.0 clears moderate DoS via express - kysely audit fix pulled 0.29.x requiring node>=22; node:20 is EOL anyway - both Dockerfiles now on node:22-alpine, matching CI - npm audit: 0 vulnerabilities; e2e verified (migrations run, sign-up returns session) Authored By: TDvorak <[email protected]> Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
21 lines
371 B
JSON
21 lines
371 B
JSON
{
|
|
"name": "containr-auth",
|
|
"private": true,
|
|
"version": "0.1.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "node src/server.js",
|
|
"start": "node src/server.js"
|
|
},
|
|
"dependencies": {
|
|
"better-auth": "1.6.33",
|
|
"dotenv": "^16.6.1",
|
|
"express": "^4.21.2",
|
|
"kysely": "^0.28.15",
|
|
"pg": "^8.16.3"
|
|
},
|
|
"overrides": {
|
|
"qs": "^6.16.0"
|
|
}
|
|
}
|