Skip to content

fix(M2-10317): resolve high severity vulnerabilities in qs and react-…#2198

Merged
divbzero merged 1 commit intodevelopfrom
chore/M2-10317/security_dep_fix
Feb 24, 2026
Merged

fix(M2-10317): resolve high severity vulnerabilities in qs and react-…#2198
divbzero merged 1 commit intodevelopfrom
chore/M2-10317/security_dep_fix

Conversation

@maxto024
Copy link
Contributor

@maxto024 maxto024 commented Feb 5, 2026

PR Description

Summary

  • Fix 2 high severity security vulnerabilities identified by yarn audit
  • Update react-router-dom ^6.30.0 → ^6.30.3
  • Add qs resolution to force >=6.14.1

Jira Ticket: M2-10317

Changes

  • package.json: Updated react-router-dom version
  • package.json: Added qs to resolutions
  • yarn.lock: Updated with new dependency versions

Audit Results

  • Before: 3 High, 4 Moderate, 1 Low
  • After: 0 High, 4 Moderate, 1 Low

Test Plan

  • yarn install succeeds
  • yarn audit shows 0 high severity vulnerabilities
  • yarn why @remix-run/router confirms version 1.23.2
  • yarn why qs confirms version 6.14.1 PR Description

@aws-amplify-us-east-1
Copy link

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-2198.d2ccder08v9rmu.amplifyapp.com

@divbzero divbzero merged commit 43b2f13 into develop Feb 24, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants