Skip to content

Commit

Permalink
fix: pin multer -> 1.4.4-lts.1 to mitigate GHSA-wm7h-9275-46v2
Browse files Browse the repository at this point in the history
Severity:
High

References:
CVE-2022-24434
SNYK-JS-DICER-2311764
mscdex/busboy#250
mscdex/dicer#22

Notes:
Only used during test anyway.
  • Loading branch information
sgammon committed Dec 19, 2022
1 parent 211e712 commit 204800e
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -207,7 +207,7 @@
"karma-sourcemap-loader": "^0.3.8",
"minimist": "^1.2.6",
"mocha": "^10.0.0",
"multer": "^1.4.4",
"multer": "1.4.4-lts.1",
"proxy-from-env": "^1.1.0",
"release-it": "^15.5.1",
"rollup": "^3.7.5",
Expand All @@ -221,6 +221,9 @@
"typescript": "^4.8.4",
"url-search-params": "^0.10.0"
},
"overrides": {
"busboy": ">=0.3.1"
},
"browser": {
"./lib/adapters/http.js": "./lib/helpers/null.js",
"./lib/platform/generic/index.js": "./lib/platform/browser/index.js",
Expand Down

0 comments on commit 204800e

Please sign in to comment.