Skip to content

Dependency "multer" includes a vulnerability and should be upgraded #1742

@jschirrmacher

Description

@jschirrmacher

The package multer@1.4.4 includes busboy@0.2.14, which includes dicer@0.2.5, which has a high severity vulnerability CVE-2022-24434.

There is already a newer version of multer, 1.4.5-lts.1, which doesn't need dicer any more. superagent should be upgraded to use multer@1.4.5-lts.1

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions