fix(security): patch open Dependabot advisories (CYPACK-1174)#1187
Closed
cyrusagent wants to merge 1 commit into
Closed
fix(security): patch open Dependabot advisories (CYPACK-1174)#1187cyrusagent wants to merge 1 commit into
cyrusagent wants to merge 1 commit into
Conversation
- Bump @anthropic-ai/claude-agent-sdk 0.2.123 -> 0.2.129 across all consuming packages - Bump @anthropic-ai/sdk ^0.91.0 -> ^0.94.0 in cyrus-claude-runner and add a root pnpm.overrides entry of >=0.91.1 to also pin the transitive copy bundled inside @anthropic-ai/claude-agent-sdk (still pinned to ^0.81.0). Resolves GHSA-p7fg-763f-g4gf (insecure default file permissions in BetaLocalFilesystemMemoryTool). - Bump @modelcontextprotocol/sdk ^1.25.2 -> ^1.29.0 in cyrus-config-updater and bump the existing root override accordingly; add ip-address >=10.1.1 override to resolve GHSA-v2v4-37r5-5v8g (XSS in Address6 HTML-emitting methods). - Add stop_details: null to locally constructed assistant BetaMessages in codex-runner, cursor-runner, and gemini-runner to satisfy the new required field added in @anthropic-ai/sdk 0.91.x. pnpm audit reports zero advisories.
This was referenced May 6, 2026
Contributor
Author
|
Closing in favor of #1192, which addresses the same two Dependabot advisories (GHSA-p7fg-763f-g4gf and GHSA-v2v4-37r5-5v8g) under CYPACK-1182. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Closes the two currently-open Dependabot advisories on the repo:
@anthropic-ai/sdk<0.91.1 (GHSA-p7fg-763f-g4gf, moderate) — insecure default file permissions inBetaLocalFilesystemMemoryTool. Fixed by bumping the direct dep incyrus-claude-runnerto^0.94.0and adding a rootpnpm.overridesentry of>=0.91.1so the transitive copy bundled inside@anthropic-ai/claude-agent-sdk(which still pins@anthropic-ai/sdk@^0.81.0) is also forced onto the patched version. Also bumps@anthropic-ai/claude-agent-sdkfrom0.2.123→0.2.129everywhere.ip-address<=10.1.0 (GHSA-v2v4-37r5-5v8g, moderate) — XSS inAddress6HTML-emitting methods. Pulled in transitively viacyrus-config-updater > @modelcontextprotocol/sdk > express-rate-limit > ip-address. Fixed by bumping@modelcontextprotocol/sdkto^1.29.0incyrus-config-updater(and updating the matching root override) and adding anip-address: >=10.1.1override as belt-and-braces.The
@anthropic-ai/sdk0.91.x release added a requiredstop_details: BetaRefusalStopDetails | nullfield toBetaMessage. Updated the locally-constructed assistant messages incodex-runner,cursor-runner, andgemini-runnerto setstop_details: null.pnpm auditreportsNo known vulnerabilities found.Per
CLAUDE.md's dependency security policy: prefer direct-dep bumps in the owningpackage.json, fall back to rootpnpm.overridesonly when a direct bump can't reach the vulnerable transitive (the SDK case requires both, since@anthropic-ai/claude-agent-sdkstill pins@anthropic-ai/sdk@^0.81.0).Supersedes
This PR supersedes:
Closes CYPACK-1174.
Test plan
pnpm installsucceeds with new lockfilepnpm auditreports zero advisoriespnpm build(all packages + apps) greenpnpm typecheckgreenpnpm test:packages:rungreen (one pre-existing flake inpackages/claude-runner/test/debug-logging.test.tswhenDEBUG_CLAUDE_AGENT_SDKenv var leaks from parent shell; passes when env var is unset — unrelated to this change)./scripts/extract-claude-tools.shshows the same 33 tools already inavailableTools; no config changes needed