modelcontextprotocol/mcpb
Watch
1
0
Fork
You've already forked mcpb
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: upgrade node-forge to 1.3.2 to address security vulnerabilities

Browse source 
Fixes three known vulnerabilities:
- GHSA-554w-wpv2-vw27: ASN.1 Unbounded Recursion (High)
- GHSA-5gfm-wpxj-wjgq: ASN.1 Validator Desynchronization (High)
- GHSA-65ch-62r8-g69g: ASN.1 OID Integer Truncation (Medium)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Joan Xie 2025-12-03 17:04:44 -08:00
commit be3b8f2561
No known key found for this signature in database
2 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

4
package.json
View file

@ -1,7 +1,7 @@
{ {
"name": "@anthropic-ai/mcpb", "name": "@anthropic-ai/mcpb",
"description": "Tools for building MCP Bundles", "description": "Tools for building MCP Bundles",
"version": "2.1.0", "version": "2.1.1",
"type": "module", "type": "module",
"main": "dist/index.js", "main": "dist/index.js",
"module": "dist/index.js", "module": "dist/index.js",
@ -89,7 +89,7 @@
"fflate": "^0.8.2", "fflate": "^0.8.2",
"galactus": "^1.0.0", "galactus": "^1.0.0",
"ignore": "^7.0.5", "ignore": "^7.0.5",
"node-forge": "^1.3.1", "node-forge": "^1.3.2",
"pretty-bytes": "^5.6.0", "pretty-bytes": "^5.6.0",
"zod": "^3.25.67", "zod": "^3.25.67",
"zod-to-json-schema": "^3.24.6" "zod-to-json-schema": "^3.24.6"

10
yarn.lock
View file

@ -36,7 +36,7 @@ __metadata:
galactus: "npm:^1.0.0" galactus: "npm:^1.0.0"
ignore: "npm:^7.0.5" ignore: "npm:^7.0.5"
jest: "npm:^29.7.0" jest: "npm:^29.7.0"
node-forge: "npm:^1.3.1" node-forge: "npm:^1.3.2"
prettier: "npm:^3.3.3" prettier: "npm:^3.3.3"
pretty-bytes: "npm:^5.6.0" pretty-bytes: "npm:^5.6.0"
ts-jest: "npm:^29.3.2" ts-jest: "npm:^29.3.2"
@ -4739,10 +4739,10 @@ __metadata:
languageName: node languageName: node
linkType: hard linkType: hard
"node-forge@npm:^1.3.1": "node-forge@npm:^1.3.2":
version: 1.3.1 version: 1.3.3
resolution: "node-forge@npm:1.3.1" resolution: "node-forge@npm:1.3.3"
checksum: 10c0/e882819b251a4321f9fc1d67c85d1501d3004b4ee889af822fd07f64de3d1a8e272ff00b689570af0465d65d6bf5074df9c76e900e0aff23e60b847f2a46fbe8 checksum: 10c0/9c6f53b0ebb34865872cf62a35b0aef8fb337e2efc766626c2e3a0040f4c02933bf29a62ba999eb44a2aca73bd512c4eda22705a47b94654b9fb8ed53db9a1db
languageName: node languageName: node
linkType: hard linkType: hard