fix(deps): override ajv@8.18.0 (CVE-2025-69873) (#4438)

Nsttt · ScriptedAlchemy · web-flow · commit a0faa70404fd · 2026-02-15T18:03:06.000-08:00
Co-authored-by: Zack Jackson &lt;25274700+ScriptedAlchemy@users.noreply.github.com&gt;
Co-authored-by: ScriptedAlchemy &lt;zackary.l.jackson@gmail.com&gt;
diff --git a/.changeset/stale-bulldogs-suffer.md b/.changeset/stale-bulldogs-suffer.md
@@ -0,0 +1,5 @@
+---
+'@module-federation/enhanced': patch
+---
+
+Security fix: bump Ajv usage to 8.18.0 to prevent CVE-2025-69873 from affecting `schema-utils` validation paths.
diff --git a/package.json b/package.json
@@ -130,7 +130,9 @@
       }
     },
     "overrides": {
-      "@changesets/assemble-release-plan": "workspace:*"
+      "@changesets/assemble-release-plan": "workspace:*",
+      "ajv": "8.18.0",
+      "schema-utils@3.3.0>ajv": "6.12.6"
     },
     "onlyBuiltDependencies": [
       "@parcel/watcher",
diff --git a/packages/enhanced/package.json b/packages/enhanced/package.json
@@ -85,7 +85,7 @@
   "devDependencies": {
     "@module-federation/webpack-bundler-runtime": "workspace:*",
     "@types/btoa": "^1.2.5",
-    "ajv": "^8.17.1",
+    "ajv": "^8.18.0",
     "enhanced-resolve": "^5.0.0",
     "terser": "^5.37.0",
     "memfs": "4.46.0"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +'@module-federation/enhanced': patch
 +---
++
 +Security fix: bump Ajv usage to 8.18.0 to prevent CVE-2025-69873 from affecting `schema-utils` validation paths.