fix(security): bump handlebars to >=4.7.9 (Socket.dev critical CVE)

@zen-agent✕ 30 failingchecks…zen/socket-fix-handlebars-c7en8e → main2 files · +7 −41updated 3w ago

▸Description· 1 comment · 1 noise

Description

Patches SOCKET-COMPOSIO-864 (Critical) by adding handlebars: ">=4.7.9" to the existing npm overrides block in src/frontend/package.json.

Socket alert	CVE	GHSA	Severity	Patched in
`SOCKET-COMPOSIO-864`	`CVE-2026-33937`	`GHSA-2w6w-674q-4c4q`	Critical	`4.7.9`

handlebars@<4.7.9 has a JavaScript Injection RCE via AST Type Confusion. It is pulled in transitively by ts-jest in the frontend test setup.

How did I test this PR

npm install --package-lock-only in src/frontend/ regenerates package-lock.json; node_modules/handlebars -> v4.7.9 (verified).
socket scan create . --view --report --org composio (scan id 931179ea-87c6-4c0e-bb89-fa457de1483f) — zero handlebars alerts in the new report.

Origin: cron-f7c85f82906b / zen-cron-6352a6575b74 Triggered by: saransh@composio.dev | Source: Socket.dev Vulnerability Auto-Fix

@codecov-commenter3w ago

Codecov Report

:white_check_mark: All modified and coverable lines are covered by tests.

@@           Coverage Diff           @@
##             main      #35   +/-   ##
=======================================
  Coverage        ?   31.23%           
=======================================
  Files           ?     1332           
  Lines           ?    58095           
  Branches        ?    12152           
=======================================
  Hits            ?    18147           
  Misses          ?    38198           
  Partials        ?     1750

Flag	Coverage Δ
frontend	`21.59% <ø> (?)`
lfx	`44.42% <ø> (?)`

Flags with carried forward coverage won't be shown. Click here to find out more.

:snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
:package: JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

▸ 1 bot/status comment hidden

@github-actions[bot]3w ago

Frontend Unit Test Coverage Report

Coverage Summary

Lines	Statements	Branches	Functions
	24.17% (8626/35678)	16.93% (4757/28093)	16.91% (1264/7474)

Unit Test Results

Tests	Skipped	Failures	Errors	Time
2779	0 :zzz:	0 :x:	0 :fire:	50.334s :stopwatch:

loading diff…