Skip to content

Commit 25bc827

Browse files
waleedlatif1claude
andcommitted
fix(deps): bump drizzle-orm to 0.45.2 (GHSA-gpj5-g38j-94v9)
Resolves Dependabot alert #98. Drizzle ORM <0.45.2 improperly escaped quoted SQL identifiers, allowing SQL injection via untrusted input passed to APIs like sql.identifier() or .as(). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
1 parent 5f56e46 commit 25bc827

5 files changed

Lines changed: 22 additions & 10 deletions

File tree

apps/docs/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
"@vercel/og": "^0.6.5",
2121
"class-variance-authority": "^0.7.1",
2222
"clsx": "^2.1.1",
23-
"drizzle-orm": "^0.44.5",
23+
"drizzle-orm": "^0.45.2",
2424
"fumadocs-core": "16.6.7",
2525
"fumadocs-mdx": "14.2.8",
2626
"fumadocs-openapi": "10.3.13",

apps/sim/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -116,7 +116,7 @@
116116
"decimal.js": "10.6.0",
117117
"docx": "^9.6.1",
118118
"docx-preview": "^0.3.7",
119-
"drizzle-orm": "^0.44.5",
119+
"drizzle-orm": "^0.45.2",
120120
"encoding": "0.1.13",
121121
"entities": "6.0.1",
122122
"es-toolkit": "1.45.1",
@@ -239,7 +239,7 @@
239239
"overrides": {
240240
"next": "16.1.6",
241241
"@next/env": "16.1.6",
242-
"drizzle-orm": "^0.44.5",
242+
"drizzle-orm": "^0.45.2",
243243
"postgres": "^3.4.5",
244244
"react-floater": {
245245
"react": "$react",

bun.lock

Lines changed: 17 additions & 5 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
"react-dom": "19.2.4",
3939
"next": "16.1.6",
4040
"@next/env": "16.1.6",
41-
"drizzle-orm": "^0.44.5",
41+
"drizzle-orm": "^0.45.2",
4242
"postgres": "^3.4.5"
4343
},
4444
"devDependencies": {

packages/db/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@
2929
"format:check": "biome format ."
3030
},
3131
"dependencies": {
32-
"drizzle-orm": "^0.44.5",
32+
"drizzle-orm": "^0.45.2",
3333
"postgres": "^3.4.5",
3434
"uuid": "^11.1.0",
3535
"zod": "^3.24.2"

0 commit comments

Comments
 (0)