From 7eebf84f8c486a0caf0ab953f5ea8a2e756d2bdd Mon Sep 17 00:00:00 2001 From: Revopush Date: Sat, 31 Oct 2026 15:22:59 +0300 Subject: [PATCH] fix(deps): bump transitive ip-address to 10.7.5 Fixes CVE-2026-111997 (ip-address <= 10.7.3). Lockfile-only: socks@2.8.10 (^10.1.1) already allows the fixed version. Co-Authored-By: Claude Opus 5.5 --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index fe029e0f..2bcf1c5e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -843,9 +843,9 @@ } }, "node_modules/ip-address": { - "version": "10.7.3", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.3.tgz", - "integrity": "sha512-A1kdq/tSb5QjvKvAMgIoEvDBIgL7qaqVP/jkvSwYYRZ9iEzvPpopxp2wQfu3SuZRHtpHNxMn8Fs0bS+gf5Xmwg==", + "version": "10.7.5", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.5.tgz", + "integrity": "sha512-t2v0rkILYv9WXmSL7TpAaU3HXgaFYOPUcH3QHgwQ++gpJuH3bqyMy4Fvt/DJCTKwzH3Cf+bAp5W/mFL39KPLzA==", "license": "MIT", "engines": { "node": ">= 12"