fix(deps): upgrade @libp2p/gossipsub to 16.0.4 for CVE-2026-49866

Resolves Dependabot alert #302 (CPU DoS via oversized IHAVE/IWANT arrays).
This commit is contained in:
Tommaso Casaburi
2026-07-17 15:03:51 +07:00
parent e14efac63a
commit d0c515e70f
2 changed files with 127 additions and 17 deletions
+1 -1
View File
@@ -187,7 +187,7 @@
},
"resolutions": {
"follow-redirects": "1.16.0",
"@libp2p/gossipsub": "15.0.23",
"@libp2p/gossipsub": "16.0.4",
"@libp2p/kad-dht": "16.2.6",
"brace-expansion@npm:^5.0.2": "5.0.6",
"protobufjs": "7.6.3",