florian.wilde/betreuungs-cockpit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 22 Wiki Activity

Abhaengigkeiten auf Fassungen ohne bekannte Luecken heben

Browse Source 
npm audit meldete 32 Schwachstellen, davon 5 kritische. Der Vorschlag
des Werkzeugs war ein Sprung auf Next.js 16 - noetig war er nicht: next,
next-auth und @auth/core waren nur durchgereicht markiert, ein eigenes
Advisory hatten allein nodemailer, postcss und sharp. Die drei sind
Blattpakete und lassen sich gezielt ueberschreiben.

Nodemailer 9 kollidiert mit einer optionalen Peer-Angabe von next-auth
(hoechstens 8). Das ist folgenlos, weil der E-Mail-Provider von next-auth
hier nicht benutzt wird, sondern Nodemailer direkt.

Danach: 0 Schwachstellen.

Refs #38
This commit is contained in:
Florian Wilde
2026-08-24 02:12:37 +02:00
parent ece995bb6a
commit 2c1b8f4c28
2 changed files with 1579 additions and 2282 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package.json
+16 -13
View File
@@ -37,8 +37,8 @@
"seed": "tsx prisma/seed.ts"
},
"dependencies": {
"@aws-sdk/client-s3": "3.735.0",
"@aws-sdk/s3-request-presigner": "3.735.0",
"@aws-sdk/client-s3": "3.1116.0",
"@aws-sdk/s3-request-presigner": "3.1116.0",
"@node-rs/argon2": "2.0.2",
"@prisma/client": "6.3.1",
"@radix-ui/react-dialog": "1.1.4",
@@ -54,9 +54,9 @@
"date-fns": "4.1.0",
"docx": "9.1.1",
"lucide-react": "0.474.0",
"next": "15.1.6",
"next-auth": "5.0.0-beta.25",
"nodemailer": "6.10.0",
"next": "15.5.23",
"next-auth": "5.0.0-beta.32",
"nodemailer": "9.0.5",
"otpauth": "9.3.6",
"pdf-lib": "1.17.1",
"qrcode": "1.5.4",
@@ -69,22 +69,22 @@
"zod": "3.24.1"
},
"devDependencies": {
"@playwright/test": "1.50.1",
"@playwright/test": "1.62.1",
"@types/archiver": "6.0.3",
"@types/node": "22.13.1",
"@types/nodemailer": "6.4.17",
"@types/nodemailer": "7.0.4",
"@types/qrcode": "1.5.5",
"@types/react": "19.0.8",
"@types/react-dom": "19.0.3",
"autoprefixer": "10.4.20",
"eslint": "9.19.0",
"eslint-config-next": "15.1.6",
"postcss": "8.5.1",
"eslint": "9.39.1",
"eslint-config-next": "15.5.23",
"postcss": "8.5.26",
"prisma": "6.3.1",
"tailwindcss": "3.4.17",
"tsx": "4.19.2",
"tsx": "4.20.6",
"typescript": "5.7.3",
"vitest": "3.0.5"
"vitest": "3.2.6"
},
"allowScripts": {
"@prisma/client@6.3.1": true,
@@ -99,6 +99,9 @@
"next-auth": {
"@simplewebauthn/server": "$@simplewebauthn/server",
"@simplewebauthn/browser": "$@simplewebauthn/browser"
}
},
"nodemailer": "9.0.5",
"postcss": "8.5.26",
"sharp": "0.35.3"
}
}