[PR #4634] [MERGED] chore: resolve Docker image vulnerabilities associated with `cross-spawn` #4881

New issue

Closed

opened 2026-03-17 02:22:46 +03:00 by kerem · 0 comments

kerem commented

2026-03-17 02:22:46 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hoppscotch/hoppscotch/pull/4634
Author: @mirarifhasan
Created: 12/19/2024
Status: ✅ Merged
Merged: 12/20/2024
Merged by: @jamesgeorge007

Base: next ← Head: feat/resolve-vulnerabilities

📝 Commits (5)

30bc828 build: add cross-spawn@7.0.5 in overrides
c2f3813 chore: lock file updated
0a5ffa6 chore: update cross-spawn in prod.Dockerfile
a00e12c chore: undo node base image update
e60d91f chore: cleanup

📊 Changes

3 files changed (+3675 additions, -4287 deletions)

View changed files

📝 package.json (+1 -0)
📝 pnpm-lock.yaml (+3655 -4287)
📝 prod.Dockerfile (+19 -0)

📄 Description

What's changed

This PR resolves high-severity vulnerabilities reported for cross-spawn against the Docker images.

Notes to reviewers

Nil

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hoppscotch/hoppscotch/pull/4634 **Author:** [@mirarifhasan](https://github.com/mirarifhasan) **Created:** 12/19/2024 **Status:** ✅ Merged **Merged:** 12/20/2024 **Merged by:** [@jamesgeorge007](https://github.com/jamesgeorge007) **Base:** `next` ← **Head:** `feat/resolve-vulnerabilities` --- ### 📝 Commits (5) - [`30bc828`](https://github.com/hoppscotch/hoppscotch/commit/30bc828678e1088169bb323b9e1d73e15220b34e) build: add cross-spawn@7.0.5 in overrides - [`c2f3813`](https://github.com/hoppscotch/hoppscotch/commit/c2f381371713d8de2c0f5873d17cce0cebf1ccb9) chore: lock file updated - [`0a5ffa6`](https://github.com/hoppscotch/hoppscotch/commit/0a5ffa648ccc5ce6ff05110bfe65a3bd56f25b34) chore: update cross-spawn in prod.Dockerfile - [`a00e12c`](https://github.com/hoppscotch/hoppscotch/commit/a00e12c8eb91aa03ab78918fa3b33ac5d91b90b6) chore: undo node base image update - [`e60d91f`](https://github.com/hoppscotch/hoppscotch/commit/e60d91ff781be122c981119813aa140504f07c2b) chore: cleanup ### 📊 Changes **3 files changed** (+3675 additions, -4287 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -0) 📝 `pnpm-lock.yaml` (+3655 -4287) 📝 `prod.Dockerfile` (+19 -0) </details> ### 📄 Description     ### What's changed  This PR resolves high-severity vulnerabilities reported for `cross-spawn` against the Docker images.  ### Notes to reviewers  Nil --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>