Skip to content

Commit 204800e

Browse files
committed
fix: pin multer -> 1.4.4-lts.1 to mitigate GHSA-wm7h-9275-46v2
Severity: High References: CVE-2022-24434 SNYK-JS-DICER-2311764 mscdex/busboy#250 mscdex/dicer#22 Notes: Only used during test anyway.
1 parent 211e712 commit 204800e

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

package.json

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -207,7 +207,7 @@
207207
"karma-sourcemap-loader": "^0.3.8",
208208
"minimist": "^1.2.6",
209209
"mocha": "^10.0.0",
210-
"multer": "^1.4.4",
210+
"multer": "1.4.4-lts.1",
211211
"proxy-from-env": "^1.1.0",
212212
"release-it": "^15.5.1",
213213
"rollup": "^3.7.5",
@@ -221,6 +221,9 @@
221221
"typescript": "^4.8.4",
222222
"url-search-params": "^0.10.0"
223223
},
224+
"overrides": {
225+
"busboy": ">=0.3.1"
226+
},
224227
"browser": {
225228
"./lib/adapters/http.js": "./lib/helpers/null.js",
226229
"./lib/platform/generic/index.js": "./lib/platform/browser/index.js",

0 commit comments

Comments
 (0)