This repository does not use npm workspaces. Each example is a standalone
project with its own package.json and package-lock.json. When a direct
dependency cannot be updated far enough to clear a Socket or npm audit
finding, pin the transitive package with an
overrides
entry in that example's package.json, then run npm install in the
example directory.
Do not run npm audit fix or npm audit fix --force. Prefer an explicit
override (or a parent-package bump) so the pin is visible and reviewable.
Record every new override here: which example, which parent is stuck, why the pin exists, and what would let us delete it.
| Example | examples/genkit-agent |
| Override | "openai": "7.8.0" |
| Parent | @genkit-ai/compat-oai@1.42.0 (openai@^4.95.0) |
| Trigger | Socket Block on PR #201: Potential vulnerability: npm openai at openai@4.104.0 (medium) |
The Genkit demo calls the Vercel AI
Gateway through Genkit's
OpenAI-compatible plugin. That plugin is the only published way to point
genkit() at an OpenAI-compatible baseURL.
genkit and @genkit-ai/compat-oai are now at 1.42.0. Both still
declare openai@^4.95.0, which resolves to 4.104.0 — the last 4.x release.
There is no newer 4.x, and no published GHSA/CVE for 4.104.0; this is Socket's
own "potential vulnerability" class. Bumping Genkit does not clear the alert.
The override forces openai@7.8.0. This example uses non-streaming
ai.generate(), which maps to client.chat.completions.create — still
present on 7.x. APIError remains a named export from openai.
Do not enable Genkit streaming through compat-oai while this override is
in place. client.beta.chat.completions.stream was removed in openai 5+;
streaming would throw at runtime.
Remove this override when @genkit-ai/compat-oai depends on openai@5
or later (or stops depending on the openai package). Then delete the
overrides key, run npm install in examples/genkit-agent, and confirm
Socket no longer flags openai@4.104.0.
Other Socket Block rows on that PR were AI "code anomaly" signals on
Genkit's own telemetry stack (@genkit-ai/core, Firebase, OpenTelemetry,
zod, and similar). Those come with genkit and are not addressed by this
override.
Several other examples already pin transitives the same way (for example
postcss in the Next.js apps, uuid in firebase-functions). Those pins
live in the example package.json. Add a section above when you introduce
a new override that needs an explanation.
| nuxt | devalue: 5.9.3 | Nuxt resolves an affected devalue release. Raised for GHSA-j22f-vq7h-c4qm, GHSA-mcm9-63f2-9j32, and GHSA-x5rw-q4pp-hg5g. Remove when Nuxt selects devalue 5.9.3 or later without this override. | GHSA-9rgm-9g3h-6x36 |
These pins preserve the APIs used by the examples while upstream dependency constraints still select affected versions. Remove each pin once its parent accepts the patched release.
| Example | Override | Reason and removal condition | Advisory |
|---|---|---|---|
eve-agent |
eve > undici: 8.10.2; @ai-sdk/provider-utils > undici: 7.29.1 |
Eve 0.56.0 pins Undici 8.9.0; provider-utils needs the 7.x line. Remove each override when its parent resolves a safe version. | GHSA-w293-vg96-wgc3, GHSA-rfgv-xxqx-mfg5 |
express-newman |
handlebars: 4.7.10 |
Newman brings Handlebars through Postman Runtime. Remove when its resolved Handlebars is 4.7.10 or later. | GHSA-8r5x-fm3f-whwj, GHSA-p8wg-vrv2-v86f, GHSA-xw65-4hp5-5hc7 |
firebase-functions |
qs: 6.16.0 |
Express/body-parser pins keep an affected qs 6 release. Remove once their resolved qs is 6.16.0 or later. | GHSA-4mjr-xmp4-gh2g, GHSA-x5fp-wj9c-mxmx |
firebase-functions |
get-uri > basic-ftp: 6.2.1 |
Firebase Tools' PAC proxy path uses get-uri, which pins basic-ftp 5.x. get-uri's FTP calls remain available in 6.x; the safer default rejects FTP transfers to a separate host. Remove when get-uri permits basic-ftp 6.2.1 or later. | GHSA-c475-qrg2-pj4r |
genkit-agent |
handlebars: 4.7.10 |
Genkit AI and Dotprompt load Handlebars. Remove when their resolved Handlebars is 4.7.10 or later. | GHSA-8r5x-fm3f-whwj, GHSA-p8wg-vrv2-v86f, GHSA-xw65-4hp5-5hc7 |
genkit-agent |
qs: 6.16.0 |
Express/body-parser pins keep an affected qs 6 release. Remove once their resolved qs is 6.16.0 or later. | GHSA-4mjr-xmp4-gh2g, GHSA-x5fp-wj9c-mxmx |
react-router |
qs: 6.16.0 |
Express/body-parser pins keep an affected qs 6 release. Remove once their resolved qs is 6.16.0 or later. | GHSA-4mjr-xmp4-gh2g, GHSA-x5fp-wj9c-mxmx |
react-router-middleware |
qs: 6.16.0 |
Express/body-parser pins keep an affected qs 6 release. Remove once their resolved qs is 6.16.0 or later. | GHSA-4mjr-xmp4-gh2g, GHSA-x5fp-wj9c-mxmx |
nextjs-ai-agent |
@workflow/core > nanoid: 5.1.16 |
Workflow 4.8.9 pins nanoid 5.1.6. Remove when Workflow permits nanoid 5.1.16 or later. | GHSA-28wg-ghj8-5hjv, GHSA-xwg4-73v4-xw9w |
nextjs-ai-agent |
@workflow/world-local and @workflow/world-vercel > undici: 7.29.1 |
Workflow 4.8.9 world adapters pin undici 7.28.0. Remove when both permit undici 7.29.1 or later. | GHSA-4cwx-7wf7-3272, GHSA-8xcm-r25x-g524, GHSA-jr45-8vmc-qm54, GHSA-m8rv-5g2x-5cg5, GHSA-v3r7-h72x-cjcm, GHSA-rfgv-xxqx-mfg5, GHSA-w293-vg96-wgc3 |
google-adk-agent |
@opentelemetry/core: 2.11.0 |
Google ADK 2.1.0 exporter packages pin OpenTelemetry core 2.1.0. Remove when all resolved core versions are 2.8.0 or later. | GHSA-8988-4f7v-96qf |
google-adk-agent |
uuid: 11.1.1 |
Google ADK brings an affected uuid through gaxios. Remove when its resolved uuid is 11.1.1 or later. | GHSA-w5hq-g745-h8pq |
genkit-agent |
uuid: 11.1.1 |
Genkit and its Google clients pin uuid 8/9/10. The APIs used here remain available in 11.1.1. Remove when all parents permit uuid 11.1.1 or later. | GHSA-w5hq-g745-h8pq |
nextjs-guard-policy |
sharp: 0.35.4 |
Rampart uses Transformers 4.2.0, which requires sharp 0.34.x. Remove when Transformers permits sharp 0.35.4 or later. | GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c |
nextjs-sensitive-info |
sharp: 0.35.4 |
Rampart uses Transformers 4.2.0, which requires sharp 0.34.x. Remove when Transformers permits sharp 0.35.4 or later. | GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c |
node-guard-policy |
sharp: 0.35.4 |
Rampart uses Transformers 4.2.0, which requires sharp 0.34.x. Remove when Transformers permits sharp 0.35.4 or later. | GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c |
firebase-functions |
@google-cloud/pubsub > @opentelemetry/core: 2.11.0 |
Pub/Sub 5.3.1 pins core 1.x but uses the compatible W3CTraceContextPropagator API. Remove when Pub/Sub permits core 2.8.0 or later. | GHSA-8988-4f7v-96qf |
google-adk-agent |
adm-zip: 0.6.1 |
Google ADK 2.1.0 requires adm-zip ^0.5.17. Remove when ADK permits adm-zip 0.6.1 or later. GHSA-vwc7-r8mq-g2x9 and GHSA-7q85-xj36-vmfc are fixed in 0.6.1. | GHSA-xcpc-8h2w-3j85 |
nextjs-guard-policy |
adm-zip: 0.6.1 |
Rampart uses ONNX Runtime, whose installer pins adm-zip 0.5.x. Remove when ONNX Runtime permits adm-zip 0.6.1 or later; this version fixes GHSA-vwc7-r8mq-g2x9 and GHSA-7q85-xj36-vmfc. | GHSA-xcpc-8h2w-3j85 |
nextjs-sensitive-info |
adm-zip: 0.6.1 |
Rampart uses ONNX Runtime, whose installer pins adm-zip 0.5.x. Remove when ONNX Runtime permits adm-zip 0.6.1 or later; this version fixes GHSA-vwc7-r8mq-g2x9 and GHSA-7q85-xj36-vmfc. | GHSA-xcpc-8h2w-3j85 |
node-guard-policy |
adm-zip: 0.6.1 |
Rampart uses ONNX Runtime, whose installer pins adm-zip 0.5.x. Remove when ONNX Runtime permits adm-zip 0.6.1 or later; this version fixes GHSA-vwc7-r8mq-g2x9 and GHSA-7q85-xj36-vmfc. | GHSA-xcpc-8h2w-3j85 |
firebase-functions |
firebase-tools > csv-parse: 7.0.2 |
Firebase Tools pins csv-parse 5.x. Its named parse streaming API remains compatible. Remove when Firebase Tools permits 7.0.2 or later. | GHSA-8cw4-87c7-c6xx |
nestjs |
@nestjs/platform-express > multer: 2.4.0 |
Nest platform-express 11.2.5 and latest 12.0.1 pin multer 2.2.0. Updated to 2.4.0 for GHSA-3pph-fpjx-jg34. Remove when the parent permits multer 2.4.0 or later. | GHSA-535w-7cp7-47q4, GHSA-qfvm-cv95-jqjf, GHSA-qvfw-j98x-7q72, GHSA-wc9g-mqfw-jrwm |
genkit-agent |
@opentelemetry/sdk-trace-node > @opentelemetry/propagator-jaeger: 2.9.0 |
SDK trace-node 1.25.1 requires Jaeger 1.25.1. Its constructor and API 1.x peer remain compatible with 2.9.0. Remove when SDK trace-node permits Jaeger 2.9.0 or later. | GHSA-45rx-2jwx-cxfr |
@workflow/core@4.8.9 pins devalue@5.9.2, which is affected by
GHSA-j22f-vq7h-c4qm and related advisories. The example overrides it to
devalue@5.9.3. Remove this override when Workflow selects 5.9.3 or later.
agents@0.24.0 pins @modelcontextprotocol/client@2.0.0 and
@modelcontextprotocol/sdk@1.30.0 as exact peers. Override them to
2.2.0 and 1.31.0 for GHSA-6qxp-vccf-f47h. The example does not
configure remote MCP OAuth. Remove these overrides when agents accepts
the patched releases; recheck its peer versions when upgrading Think.