{"vulnerability": "cve-2026-6918", "sightings": [{"uuid": "c1f9ddec-b4d1-42be-8abf-5aac623360d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6918", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4fmtegma2p", "content": "CVE-2026-6918 - Eclipse OpenJITServer TCP Message Crash Vulnerability\nCVE ID : CVE-2026-6918\n \n Published : May 5, 2026, 1:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by send...", "creation_timestamp": "2026-05-05T14:31:06.790717Z"}, {"uuid": "b3341e4d-3ee4-414b-ae73-54e7bd129570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6918", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z52m2ao2k", "content": "\ud83d\udfe0 CVE-2026-6918 - High (7.5)\n\nIn Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6918/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T20:20:10.066643Z"}, {"uuid": "5f17ce67-608e-465a-bc63-a6f71a11c1fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69185", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7euzxlan25", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-69185](https://github.com/socketio/socket.io/commit/7c6ef571a00656718e9e05e3b948fd1758b...\nhttps://github.com/socketio/socket.io/commit/7c6ef571a00656718e9e05e3b948fd1758b2a7b4 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-03T20:52:06.256928Z"}, {"uuid": "905df3a5-afda-4a5d-bc94-f04683cc07da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69185", "type": "seen", "source": "https://gist.github.com/djlan/d2568012c9abc9b4d5f32de0b8b67443", "content": "# [SECURITY] \u5c06 `/sample/angular-host-app` \u4e2d\u7684 socket.io-parser \u4ece 4.2.6 \u5347\u7ea7\u5230 4.2.7\n\n> **\u4e00\u53e5\u8bdd\u603b\u7ed3\uff1a** \u6b64 PR \u4ec5\u66f4\u65b0 Angular Host App \u7684 npm \u9501\u6587\u4ef6\uff0c\u5c06\u4f20\u9012\u4f9d\u8d56 `socket.io-parser` \u56fa\u5b9a\u5230 4.2.7\uff0c\u4ee5\u54cd\u5e94 Component Governance \u62a5\u544a\u7684\u9ad8\u5371\u5b89\u5168\u544a\u8b66 CVE-2026-69185\uff0c\u540c\u65f6\u4e0d\u6539\u52a8\u5e94\u7528\u6e90\u7801\u6216\u58f0\u660e\u4f9d\u8d56\u3002\n\n| \u9879\u76ee | \u4fe1\u606f |\n|---|---|\n| PR | [769541](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/769541) |\n| \u4f5c\u8005 | Dependabot |\n| \u72b6\u6001 | Active\uff1b\u975e\u8349\u7a3f\uff1b\u5408\u5e76\u72b6\u6001\u4e3a Succeeded |\n| \u5206\u652f | `dependabot/npm_and_yarn/sample%2Fangular-host-app/socket.io-parser-4.2.7-751516` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2026-08-13 09:34:52 |\n| \u53d8\u66f4\u7edf\u8ba1 | 1 \u4e2a\u63d0\u4ea4\u30011 \u4e2a\u8fed\u4ee3\u30011 \u4e2a\u6587\u4ef6\uff1b\u53ef\u89c1 diff \u4e3a 3 \u884c\u65b0\u589e\u30013 \u884c\u5220\u9664\uff0c\u5171 885 \u5b57\u8282 |\n\n## \u76ee\u5f55\n\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u529f\u80fd\u6a21\u5757\u8bf4\u660e](#\u529f\u80fd\u6a21\u5757\u8bf4\u660e)\n  - [\u5b89\u5168\u4f9d\u8d56\u4fee\u590d](#\u5b89\u5168\u4f9d\u8d56\u4fee\u590d)\n  - [npm \u9501\u5b9a\u4e0e\u5236\u54c1\u6e90\u89e3\u6790](#npm-\u9501\u5b9a\u4e0e\u5236\u54c1\u6e90\u89e3\u6790)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n- [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027)\n- [\u6d4b\u8bd5\u5efa\u8bae\u4e0e\u73b0\u6709\u8bc1\u636e](#\u6d4b\u8bd5\u5efa\u8bae\u4e0e\u73b0\u6709\u8bc1\u636e)\n- [Diff \u8986\u76d6\u8303\u56f4](#diff-\u8986\u76d6\u8303\u56f4)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u8be5 PR \u7531 Dependabot \u81ea\u52a8\u521b\u5efa\uff0c\u7528\u4e8e\u5904\u7406 Component Governance \u544a\u8b66 **16138004 / CVE-2026-69185\uff08High\uff09**\u3002\u5b9e\u9645\u4ee3\u7801\u53d8\u66f4\u96c6\u4e2d\u5728 [`sample/angular-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/769541?path=/sample/angular-host-app/package-lock.json&_a=files)\uff1a\n\n- `socket.io-parser` \u7684\u9501\u5b9a\u7248\u672c\u4ece **4.2.6** \u66f4\u65b0\u4e3a **4.2.7**\u3002\n- \u5bf9\u5e94\u7684\u5185\u90e8 Azure Artifacts tarball \u5730\u5740\u4ece `socket.io-parser-4.2.6.tgz` \u5207\u6362\u5230 `socket.io-parser-4.2.7.tgz`\u3002\n- \u5b8c\u6574\u6027\u6821\u9a8c\u503c\u968f\u5305\u5185\u5bb9\u66f4\u65b0\uff0c\u786e\u4fdd npm \u5b89\u88c5\u65f6\u9a8c\u8bc1\u7684\u662f 4.2.7 \u5236\u54c1\u3002\n- `devOptional: true`\u3001MIT \u8bb8\u53ef\u8bc1\u6807\u8bb0\u53ca\u4f9d\u8d56\u7ed3\u6784\u5728\u53ef\u89c1 diff \u4e2d\u4fdd\u6301\u4e0d\u53d8\u3002\n\n\u6570\u636e\u5305\u4e2d\u7684\u4e0a\u6e38\u53d1\u5e03\u8bf4\u660e\u6307\u51fa\uff0c4.2.7 \u5305\u542b\u4e24\u9879\u89e3\u6790\u5668\u4fee\u590d\uff1a\u62d2\u7edd\u9644\u4ef6\u6570\u4e3a\u96f6\u7684\u4e8c\u8fdb\u5236\u6570\u636e\u5305\uff0c\u4ee5\u53ca\u5728\u62c6\u89e3\u4e8c\u8fdb\u5236\u6570\u636e\u5305\u65f6\u9075\u5faa\u5bf9\u8c61\u7684 `toJSON()`\u3002\u5176\u4e2d\u5b89\u5168\u544a\u8b66\u4e0e\u5177\u4f53\u4e0a\u6e38\u4fee\u590d\u4e4b\u95f4\u7684\u7cbe\u786e\u6620\u5c04\u672a\u5728\u6570\u636e\u5305\u4e2d\u5c55\u5f00\uff0c\u56e0\u6b64\u4e0d\u80fd\u4ec5\u51ed\u8be5\u6570\u636e\u5305\u65ad\u8a00\u662f\u54ea\u4e00\u9879\u63d0\u4ea4\u76f4\u63a5\u4fee\u590d\u4e86 CVE-2026-69185\u3002\n\n## \u529f\u80fd\u6a21\u5757\u8bf4\u660e\n\n### \u5b89\u5168\u4f9d\u8d56\u4fee\u590d\n\n`socket.io-parser` \u8d1f\u8d23 Socket.IO \u6570\u636e\u5305\u7684\u7f16\u7801\u3001\u89e3\u7801\u4ee5\u53ca\u4e8c\u8fdb\u5236\u9644\u4ef6\u5904\u7406\u3002\u6b64\u6b21\u8865\u4e01\u7248\u672c\u5347\u7ea7\u4e0d\u6539\u53d8\u4ed3\u5e93\u5185\u4e1a\u52a1\u903b\u8f91\uff0c\u800c\u662f\u901a\u8fc7\u91c7\u7528\u4e0a\u6e38 4.2.7 \u5b9e\u73b0\u6765\u66ff\u6362 4.2.6\uff0c\u4ece\u4f9d\u8d56\u4f9b\u5e94\u94fe\u5c42\u9762\u6d88\u9664 Component Governance \u6807\u8bb0\u7684\u6613\u53d7\u653b\u51fb\u7248\u672c\u3002\n\n\u5de5\u4f5c\u65b9\u5f0f\u5982\u4e0b\uff1a\n\n1. npm \u6839\u636e\u9501\u6587\u4ef6\u9009\u62e9 `socket.io-parser@4.2.7`\uff0c\u800c\u4e0d\u518d\u5b89\u88c5 4.2.6\u3002\n2. \u5b89\u88c5\u8fc7\u7a0b\u4ece\u73b0\u6709 AzureNotebooksEntry \u5185\u90e8 npm \u6e90\u4e0b\u8f7d\u65b0\u7684 tarball\u3002\n3. npm \u4f7f\u7528\u66f4\u65b0\u540e\u7684 integrity \u503c\u6821\u9a8c\u4e0b\u8f7d\u5185\u5bb9\uff0c\u907f\u514d\u65e7\u5305\u6216\u4e0d\u5339\u914d\u5236\u54c1\u88ab\u5f53\u4f5c\u76ee\u6807\u7248\u672c\u63a5\u53d7\u3002\n4. \u8fd0\u884c\u65f6\u6216\u5f00\u53d1\u5de5\u5177\u94fe\u4e2d\u6240\u6709\u901a\u8fc7\u8be5\u9501\u6587\u4ef6\u5b89\u88c5\u5e76\u52a0\u8f7d\u6b64\u4f20\u9012\u4f9d\u8d56\u7684 Socket.IO \u8def\u5f84\uff0c\u5c06\u4f7f\u7528 4.2.7 \u7684\u89e3\u6790\u5668\u884c\u4e3a\u3002\n\n### npm \u9501\u5b9a\u4e0e\u5236\u54c1\u6e90\u89e3\u6790\n\n\u672c\u6b21\u53ea\u4fee\u6539 [`sample/angular-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/769541?path=/sample/angular-host-app/package-lock.json&_a=files)\uff0c\u6ca1\u6709\u4fee\u6539 `package.json`\u3002\u8fd9\u8868\u660e\u9876\u5c42\u4f9d\u8d56\u7ea6\u675f\u5728\u6570\u636e\u5305\u6240\u793a\u8303\u56f4\u5185\u65e0\u9700\u8c03\u6574\uff0c\u53d8\u66f4\u4f5c\u7528\u662f\u66f4\u65b0\u5f53\u524d\u4f9d\u8d56\u56fe\u89e3\u6790\u51fa\u7684\u5177\u4f53\u4f20\u9012\u4f9d\u8d56\u7248\u672c\u3002\n\n\u4fdd\u7559\u5185\u90e8\u5236\u54c1\u6e90\u5730\u5740\u610f\u5473\u7740\u73b0\u6709\u5305\u83b7\u53d6\u3001\u4ee3\u7406\u548c\u6cbb\u7406\u6d41\u7a0b\u4e0d\u53d8\uff1b\u66f4\u65b0\u540e\u7684 integrity \u503c\u5219\u4e0e\u65b0 tarball \u914d\u5957\u3002\u4e24\u8005\u5fc5\u987b\u540c\u65f6\u751f\u6548\uff0c\u5426\u5219\u5e72\u51c0\u5b89\u88c5\u53ef\u80fd\u56e0\u5236\u54c1\u4e0d\u5b58\u5728\u3001\u6743\u9650\u95ee\u9898\u6216\u54c8\u5e0c\u4e0d\u5339\u914d\u800c\u5931\u8d25\u3002\n\n## \u5f71\u54cd\u5206\u6790\n\n| \u5f71\u54cd\u9762 | \u5206\u6790 |\n|---|---|\n| \u5b89\u5168\u6027 | \u9884\u671f\u89e3\u9664\u9488\u5bf9 `socket.io-parser@4.2.6` \u7684\u9ad8\u5371 CG \u544a\u8b66\uff0c\u5e76\u51cf\u5c11\u6076\u610f\u6216\u5f02\u5e38\u4e8c\u8fdb\u5236\u6570\u636e\u5305\u89e6\u53d1\u5df2\u77e5\u89e3\u6790\u5668\u7f3a\u9677\u7684\u98ce\u9669\u3002\u662f\u5426\u5df2\u5b9e\u9645\u5173\u95ed\u544a\u8b66\u4ecd\u9700\u4ee5\u5408\u5e76\u540e\u7684 CG \u626b\u63cf\u7ed3\u679c\u4e3a\u51c6\u3002 |\n| \u5e94\u7528\u4ee3\u7801 | \u6570\u636e\u5305\u4e2d\u6ca1\u6709\u5e94\u7528\u6e90\u7801\u6539\u52a8\uff1b\u73b0\u6709\u8c03\u7528\u65b9\u65e0\u9700\u6539 API\u3002 |\n| \u8fd0\u884c\u65f6\u884c\u4e3a | \u4e8c\u8fdb\u5236\u5305\u89e3\u6790\u8fb9\u754c\u884c\u4e3a\u4f1a\u91c7\u7528 4.2.7\uff1a\u96f6\u9644\u4ef6\u4e8c\u8fdb\u5236\u5305\u53ef\u80fd\u4ece\u6b64\u524d\u7684\u5904\u7406\u65b9\u5f0f\u53d8\u4e3a\u660e\u786e\u62d2\u7edd\uff1b\u5305\u542b\u81ea\u5b9a\u4e49 `toJSON()` \u7684\u5bf9\u8c61\u5728\u4e8c\u8fdb\u5236\u5305\u62c6\u89e3\u65f6\u53ef\u80fd\u5f97\u5230\u4e0d\u540c\u4f46\u66f4\u7b26\u5408\u9884\u671f\u7684\u5e8f\u5217\u5316\u7ed3\u679c\u3002 |\n| \u6784\u5efa\u4e0e\u5b89\u88c5 | \u4f9d\u8d56\u6062\u590d\u5c06\u4e0b\u8f7d 4.2.7\uff0c\u5e76\u4f7f\u7528\u65b0 integrity \u503c\u6821\u9a8c\u3002\u5185\u90e8 feed \u7684\u53ef\u7528\u6027\u548c\u5236\u54c1\u540c\u6b65\u72b6\u6001\u662f\u5b89\u88c5\u6210\u529f\u7684\u5173\u952e\u3002 |\n| \u90e8\u7f72\u8303\u56f4 | \u5f71\u54cd\u9650\u5b9a\u5728\u4f7f\u7528 `sample/angular-host-app/package-lock.json` \u5b89\u88c5\u4f9d\u8d56\u7684\u73af\u5883\u3002\u6570\u636e\u5305\u6ca1\u6709\u63d0\u4f9b\u5176\u4ed6\u9879\u76ee\u5171\u4eab\u6b64\u9501\u6587\u4ef6\u7684\u8bc1\u636e\u3002 |\n| \u8bb8\u53ef\u8bc1 | \u53ef\u89c1\u9501\u6587\u4ef6\u6761\u76ee\u4ecd\u6807\u8bb0\u4e3a MIT\uff0c\u672a\u663e\u793a\u8bb8\u53ef\u8bc1\u53d8\u5316\u3002 |\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\n\n1. **\u4e8c\u8fdb\u5236\u534f\u8bae\u8fb9\u754c\u884c\u4e3a\u53d8\u5316\uff1a** \u8865\u4e01\u7248\u4f1a\u62d2\u7edd\u201c\u58f0\u660e\u4e3a\u4e8c\u8fdb\u5236\u4f46\u9644\u4ef6\u6570\u4e3a\u96f6\u201d\u7684\u6570\u636e\u5305\u3002\u5982\u679c\u73b0\u6709\u4ee3\u7801\u6216\u6d4b\u8bd5\u5939\u5177\u66fe\u751f\u6210\u8fd9\u7c7b\u975e\u89c4\u8303\u6570\u636e\u5305\uff0c\u5347\u7ea7\u540e\u53ef\u80fd\u51fa\u73b0\u89e3\u6790\u9519\u8bef\u6216\u8fde\u63a5\u5c42\u5f02\u5e38\uff1b\u8fd9\u5c5e\u4e8e\u5b89\u5168\u6536\u7d27\u5e26\u6765\u7684\u6f5c\u5728\u517c\u5bb9\u6027\u53d8\u5316\u3002\n2. **\u5e8f\u5217\u5316\u8f93\u51fa\u53d8\u5316\uff1a** \u65b0\u7248\u672c\u5728\u62c6\u89e3\u4e8c\u8fdb\u5236\u5305\u65f6\u9075\u5faa `toJSON()`\u3002\u5e26\u81ea\u5b9a\u4e49\u5e8f\u5217\u5316\u65b9\u6cd5\u7684\u5bf9\u8c61\u53ef\u80fd\u4ea7\u751f\u4e0e 4.2.6 \u4e0d\u540c\u7684\u6570\u636e\u7ed3\u6784\uff0c\u9700\u8981\u5173\u6ce8\u524d\u540e\u7aef\u5bf9\u8f7d\u8377\u5f62\u72b6\u7684\u9690\u5f0f\u5047\u8bbe\u3002\n3. **\u670d\u52a1\u7aef\u4e0e\u5ba2\u6237\u7aef\u7248\u672c\u7ec4\u5408\uff1a** \u867d\u7136\u662f 4.2.x \u5185\u7684\u8865\u4e01\u5347\u7ea7\uff0c\u4ecd\u5e94\u9a8c\u8bc1 Angular Host App \u5b9e\u9645\u4f7f\u7528\u7684 Socket.IO \u5ba2\u6237\u7aef/\u670d\u52a1\u7aef\u7ec4\u5408\uff0c\u5c24\u5176\u662f\u4e8c\u8fdb\u5236\u4e8b\u4ef6\u3001\u91cd\u8fde\u548c\u9519\u8bef\u5904\u7406\u8def\u5f84\u3002\n4. **\u5185\u90e8\u5236\u54c1\u6e90\u98ce\u9669\uff1a** \u9501\u6587\u4ef6\u6307\u5411 Azure Artifacts \u5185\u90e8\u6e90\u3002\u5982\u679c 4.2.7 \u5305\u672a\u5b8c\u6574\u540c\u6b65\u3001\u8bbf\u95ee\u7b56\u7565\u4e0d\u540c\u6216 integrity \u4e0e\u6e90\u4e2d\u5236\u54c1\u4e0d\u4e00\u81f4\uff0cCI \u6216\u5f00\u53d1\u73af\u5883\u7684\u5e72\u51c0\u5b89\u88c5\u4f1a\u5931\u8d25\u3002\n5. **\u9501\u6587\u4ef6\u5355\u70b9\u66f4\u65b0\uff1a** \u6570\u636e\u5305\u53ea\u663e\u793a\u9501\u6587\u4ef6\u53d8\u5316\uff0c\u672a\u663e\u793a\u4f9d\u8d56\u58f0\u660e\u6216\u751f\u6210\u9501\u6587\u4ef6\u6240\u7528 npm/Node.js \u7248\u672c\u3002\u4e0d\u540c npm \u7248\u672c\u91cd\u65b0\u751f\u6210\u9501\u6587\u4ef6\u65f6\u53ef\u80fd\u4ea7\u751f\u989d\u5916\u683c\u5f0f\u6216\u4f9d\u8d56\u56fe\u53d8\u5316\uff0c\u56e0\u6b64\u5e94\u4f7f\u7528\u9879\u76ee\u65e2\u5b9a\u5de5\u5177\u7248\u672c\u9a8c\u8bc1\u53ef\u590d\u73b0\u6027\u3002\n6. **\u5b89\u5168\u4fee\u590d\u786e\u8ba4\u8fb9\u754c\uff1a** PR \u63cf\u8ff0\u5c06\u5347\u7ea7\u4e0e CVE-2026-69185 \u5173\u8054\uff0c\u4f46\u6570\u636e\u5305\u672a\u5305\u542b\u6f0f\u6d1e\u6280\u672f\u7ec6\u8282\u6216\u544a\u8b66\u5173\u95ed\u7ed3\u679c\uff0c\u4e0d\u80fd\u636e\u6b64\u786e\u8ba4\u6240\u6709\u53d7\u5f71\u54cd\u8c03\u7528\u8def\u5f84\u5df2\u88ab\u52a8\u6001\u6d4b\u8bd5\u8986\u76d6\u3002\n\n## \u6d4b\u8bd5\u5efa\u8bae\u4e0e\u73b0\u6709\u8bc1\u636e\n\n\u6570\u636e\u5305\u672a\u5305\u542b CI \u6784\u5efa\u3001\u81ea\u52a8\u5316\u6d4b\u8bd5\u7ed3\u679c\u3001\u624b\u5de5\u9a8c\u8bc1\u8bb0\u5f55\u6216\u65b0\u589e\u6d4b\u8bd5\u6587\u4ef6\uff1b\u56e0\u6b64\u4e0d\u80fd\u58f0\u79f0\u8be5 PR \u5df2\u901a\u8fc7\u6784\u5efa\u6216\u6d4b\u8bd5\u3002\u5efa\u8bae\u81f3\u5c11\u6267\u884c\uff1a\n\n- \u5728 `sample/angular-host-app` \u4e2d\u8fdb\u884c\u9501\u6587\u4ef6\u9a71\u52a8\u7684\u5e72\u51c0\u4f9d\u8d56\u5b89\u88c5\uff0c\u786e\u8ba4\u5185\u90e8 feed \u53ef\u4e0b\u8f7d 4.2.7 \u4e14 integrity \u6821\u9a8c\u6210\u529f\u3002\n- \u6784\u5efa Angular Host App\uff0c\u5e76\u8fd0\u884c\u5176\u73b0\u6709\u5355\u5143\u6d4b\u8bd5\u548c\u96c6\u6210\u6d4b\u8bd5\u3002\n- \u9a8c\u8bc1\u666e\u901a Socket.IO \u6587\u672c\u4e8b\u4ef6\u3001\u4e8c\u8fdb\u5236\u4e8b\u4ef6\u3001\u591a\u4e2a\u9644\u4ef6\u3001\u91cd\u8fde\u53ca\u89e3\u6790\u9519\u8bef\u5904\u7406\u3002\n- \u589e\u52a0\u6216\u6267\u884c\u9488\u5bf9\u96f6\u9644\u4ef6\u4e8c\u8fdb\u5236\u5305\u7684\u8d1f\u5411\u6d4b\u8bd5\uff0c\u786e\u8ba4\u62d2\u7edd\u884c\u4e3a\u4e0d\u4f1a\u5bfc\u81f4\u672a\u5904\u7406\u5f02\u5e38\u6216\u65e0\u9650\u91cd\u8bd5\u3002\n- \u9a8c\u8bc1\u5e26\u81ea\u5b9a\u4e49 `toJSON()` \u4e14\u5305\u542b\u4e8c\u8fdb\u5236\u5b57\u6bb5\u7684\u8f7d\u8377\uff0c\u786e\u8ba4\u5e8f\u5217\u5316\u7ed3\u679c\u7b26\u5408\u5e94\u7528\u53cc\u65b9\u7ea6\u5b9a\u3002\n- \u5408\u5e76\u540e\u91cd\u65b0\u8fd0\u884c Component Governance \u626b\u63cf\uff0c\u786e\u8ba4\u544a\u8b66 16138004 / CVE-2026-69185 \u88ab\u89e3\u9664\u3002\n\n## Diff \u8986\u76d6\u8303\u56f4\n\n\u6570\u636e\u5305\u58f0\u660e\uff1a\n\n- PR \u5171\u53d8\u66f4 **1 \u4e2a\u6587\u4ef6**\uff0c\u5e76\u63d0\u4f9b\u4e86\u8be5\u6587\u4ef6\u7684 diff\u3002\n- \u603b diff \u672a\u622a\u65ad\uff08`diffTruncated: false`\uff09\u3002\n- [`sample/angular-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/769541?path=/sample/angular-host-app/package-lock.json&_a=files) \u7684\u5355\u6587\u4ef6 diff \u672a\u622a\u65ad\uff08`truncated: false`\uff09\u3002\n- \u6570\u636e\u5305\u6ca1\u6709\u5bfc\u51fa\u9519\u8bef\u6216\u8b66\u544a\u3002\n\n\u56e0\u6b64\uff0c\u672c\u8bf4\u660e\u8986\u76d6\u4e86\u6570\u636e\u5305\u4e2d\u63d0\u4f9b\u7684\u5168\u90e8\u4ee3\u7801 diff\u3002\u8986\u76d6\u5b8c\u6574\u4ec5\u8868\u793a\u53d8\u66f4\u6587\u672c\u6ca1\u6709\u88ab\u622a\u65ad\uff0c\u5e76\u4e0d\u8868\u793a\u6570\u636e\u5305\u5305\u542b CI \u65e5\u5fd7\u3001\u6f0f\u6d1e\u8be6\u60c5\u3001\u8fd0\u884c\u65f6\u8c03\u7528\u94fe\u6216\u6d4b\u8bd5\u7ed3\u679c\uff1b\u4e0a\u8ff0\u7f3a\u5931\u5185\u5bb9\u672a\u88ab\u5f53\u4f5c\u5df2\u5206\u6790\u4e8b\u5b9e\u3002\n", "creation_timestamp": "2026-08-30T16:19:37.849925Z"}]}