[Arvion] Security remediation: Update vue-loader to 17.4.2

[arvion-bot]

Security Remediation

Fix 1 Vulnerability

Auto-generated by Arvion - This PR automatically remediates 1 vulnerabilities by updating 1 dependencies and modifying 2 files.

Executive Summary

Vulnerabilities Fixed

Critical - 0 Fixed None

High - 0 Fixed None

Dependency Updates

1 packages updated

vue-loader 15.11.1 → 17.4.2

Code Changes

2 files modified

---

Arvion Impact Analysis Diagram

Interactive visualization showing vulnerability → dependency → code change flow

Click any file node to jump to detailed code review below

%%{init: {'theme':'dark', 'themeVariables': {'fontSize':'14px'}}}%%
graph LR
    subgraph CVEs["Vulnerabilities Fixed"]
        CVE1["MODERATE GHSA-7fh5-64p2-3v2j<br/>No description available..."]
    end

    subgraph DEPS["Dependencies Updated"]

    end

    subgraph FILES["Files Modified"]
        FILE1["build/frontend-legacy/package.json"]
        FILE2["build/frontend-legacy/package-lock.json"]
    end



    click FILE1 "#file-1-build-frontend-legacy-package-json" "View detailed changes"
    click FILE2 "#file-2-build-frontend-legacy-package-lock-json" "View detailed changes"

Loading

Quick Summary

2 files modified

File	Type	Breaking	Review
build/frontend-legacy/package.json	manifest	No	Jump to review →
build/frontend-legacy/package-lock.json	compatible	No	Jump to review →

---

Vulnerabilities Addressed

GHSA-7fh5-64p2-3v2j - No description available (MODERATE) - Click to expand

Severity: MODERATE
Status: FIXED

Summary:
No description available

Details:

Affected Packages:

• postcss

References:

• GHSA

---

Dependency Update Summary

View dependency changes - Click to expand

Dependency Updates

Package	Old Version	New Version	Change Type	Fixes CVEs
vue-loader	15.11.1	17.4.2	Safe	N/A

---

Arvion Code Review

Powered by Arvion's AI-driven code analysis

Click any file below to see detailed explanations and automated fix rationale

---

File 1: build/frontend-legacy/package.json

Type: manifest

View changes - Click to expand

Why: Updated 1 dependencies:
vue-loader (devDependencies): ^15.11.1 → ^17.4.2

↑ Back to summary

---

File 2: build/frontend-legacy/package-lock.json

Type: compatible

View changes - Click to expand

Why: Regenerated package-lock.json to sync with package.json updates

↑ Back to summary

---

Need Help?

Arvion Support Resources:

• Documentation: Remediation Guide
• Support: hello@arvion.ai
• Report Issues: GitHub Issues
• Website: arvion.ai

---

Auto-generated by Arvion Security Platform
Intelligent vulnerability remediation with automated code fixes
^{Generated: 2026-01-29 02:21:41 UTC | Remediation ID: 8d7e7264-a126-4ecb-b54b-97d5fd85696e}