Patch Changes
- fe9c11c: Bump
astroto6.2.2,viteto7.3.2, and@astrojs/reactto5.0.4to pull in upstream security
fixes (XSS inastrodefine:vars[CVE-2026-41067], path traversal andserver.fs.denybypass invite
[CVE-2026-39365, CVE-2026-39364], and SVGO Billion-Laughs DoS [CVE-2026-29074]). - Updated dependencies [2f29aa6]
- @pandacss/core@1.11.1
- @pandacss/node@1.11.1