Skip to content

Merge pull request #57758 from github/repo-sync

96b8468
Select commit
Loading
Failed to load commit list.
Merged

Repo sync #40633

Merge pull request #57758 from github/repo-sync
96b8468
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Oct 1, 2025 in 3s

2 new alerts including 1 high severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 high
  • 1 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 11 in src/frame/lib/read-file-contents.ts

See this annotation in the file changed.

Code scanning / CodeQL

Uncontrolled data used in path expression High

This path depends on a
user-provided value
.
This path depends on a
user-provided value
.
This path depends on a user-provided value.

Check warning on line 156 in src/frame/middleware/resolve-recommended.ts

See this annotation in the file changed.

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
user controlled input
.
This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
user controlled input
.