Fix 11 S360 OSS vulnerabilities (axios, protobufjs, langsmith, @grpc/grpc-js, hono, ws) - #285

Closed

EvanderDS (EvanderDS) wants to merge 4 commits into

microsoft:mainfrom

EvanderDS:s360-fix/vuln-management-axios-protobufjs-langsmith

Commits on Sep 2, 2026

Fix CVE-2026-45134, CVE-2026-44289/91/93, CVE-2026-44486/87/88/92/94 via pnpm overrides
Evander Sequeira
committed
90aa2d7

Commits on Sep 7, 2026

Fix CVE-2026-48068/48069 (@grpc/grpc-js), CVE-2026-54290 (hono), CVE-2026-48779 (ws) via pnpm overrides
Evander Sequeira
committed
5900789
Raise hono override floor to ^4.13.5 to prevent downgrade into later CVE range

Evander Sequeira
and
Copilot
committed
a9f8395
Clean up remediation comments and google-adk pre-release note wording
Evander Sequeira
committed
216111a