NPM package dicer DoS vulnerability

[makandz]

There seems to be a vulnerability within dicer with no known fix from the Snyk Vulnerability Database (https://security.snyk.io/vuln/SNYK-JS-DICER-2311764)

There appears to be a PR open on dicer to resolve this but it's been open since 2021 with no merge. mscdex/dicer#22

Is this known and are there any plans to move away from dicer to an alternative?

[makandz]

I should also probably mention that this package dicer is coming from busboy

[makandz]

🤦 ignore this, turns out I was on an older version of graphql-upload.