3 high severity vulnerabilities

[qupig]

image-size  2.0.0 - 2.0.1
Severity: high
image-size Denial of Service via Infinite Loop during Image Processing - https://github.com/advisories/GHSA-m5qc-5hw7-8vg7
fix available via `npm audit fix --force`
Will install web-ext@8.4.0, which is a breaking change
node_modules/image-size
  addons-linter  7.9.0
  Depends on vulnerable versions of image-size
  node_modules/addons-linter
    web-ext  >=8.5.0
    Depends on vulnerable versions of addons-linter
    node_modules/web-ext

3 high severity vulnerabilities

addons-linter have release new version fixed the issue:
https://github.com/mozilla/addons-linter/releases/tag/7.10.0

But because of the exact version used in this project:

web-ext/package.json

Lines 61 to 64 in a19675d

	"dependencies": {
	"@babel/runtime": "7.27.0",
	"@devicefarmer/adbkit": "3.3.8",
	"addons-linter": "7.9.0",

Think of it as a pass-through of the issue:

• Use semvar ranges rather than exact versions for dependencies addons-linter#5625
• Please consider using non-exact versions for your dependencies #2112

[Rob--W]

The dependency has been updated in #3396, we will cut a new release (8.5.1) to include this.

[Rob--W]

This was fixed in 8.6.0 - https://github.com/mozilla/web-ext/releases/tag/8.6.0