Skip to content

fix(misc): critical severity for form-data package#32108

Merged
ndcunningham merged 1 commit intomasterfrom
fix/npm-form-data-critical-issue
Jul 28, 2025
Merged

fix(misc): critical severity for form-data package#32108
ndcunningham merged 1 commit intomasterfrom
fix/npm-form-data-critical-issue

Conversation

@ndcunningham
Copy link
Copy Markdown
Contributor

@ndcunningham ndcunningham commented Jul 28, 2025

Currently

The form-data version we are using contains a critical issue which can be reproduce by running.

pnpm dlx audit-ci --critical --report-type summary

GHSA-fjxv-7rqg-78g4

We should update our form-data version that contains the patch to address the vulnerability.

Misc

This also addresses our nightly audit failures: https://github.com/nrwl/nx/actions/runs/16545241633/job/46791870646

@ndcunningham ndcunningham self-assigned this Jul 28, 2025
@ndcunningham ndcunningham requested a review from a team as a code owner July 28, 2025 15:11
@vercel
Copy link
Copy Markdown

vercel Bot commented Jul 28, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated (UTC)
nx-dev ✅ Ready (Inspect) Visit Preview Jul 28, 2025 3:31pm

@nx-cloud
Copy link
Copy Markdown
Contributor

nx-cloud Bot commented Jul 28, 2025

View your CI Pipeline Execution ↗ for commit 2982a5a

Command Status Duration Result
nx affected --targets=lint,test,build,e2e,e2e-c... ✅ Succeeded 40m 7s View ↗
nx run-many -t check-imports check-commit check... ✅ Succeeded 2m 1s View ↗
nx-cloud record -- nx-cloud conformance:check ✅ Succeeded 2s View ↗
nx-cloud record -- nx sync:check ✅ Succeeded 7s View ↗
nx-cloud record -- nx format:check ✅ Succeeded 6s View ↗
nx documentation ✅ Succeeded 4m 6s View ↗

☁️ Nx Cloud last updated this comment at 2025-07-28 15:59:42 UTC

@ndcunningham ndcunningham enabled auto-merge (squash) July 28, 2025 15:18
@ndcunningham ndcunningham merged commit 38c7506 into master Jul 28, 2025
6 checks passed
@ndcunningham ndcunningham deleted the fix/npm-form-data-critical-issue branch July 28, 2025 16:00
jaysoo pushed a commit that referenced this pull request Jul 29, 2025
### Currently
The `form-data` version we are using contains a critical issue which can
be reproduce by running.
```
pnpm dlx audit-ci --critical --report-type summary
```
GHSA-fjxv-7rqg-78g4

We should update our `form-data` version that contains the patch to
address the vulnerability.

### Misc
This also addresses our nightly audit failures:
https://github.com/nrwl/nx/actions/runs/16545241633/job/46791870646
ndcunningham added a commit that referenced this pull request Jul 30, 2025
### Currently
The `form-data` version we are using contains a critical issue which can
be reproduce by running.
```
pnpm dlx audit-ci --critical --report-type summary
```
GHSA-fjxv-7rqg-78g4

We should update our `form-data` version that contains the patch to
address the vulnerability.

### Misc
This also addresses our nightly audit failures:
https://github.com/nrwl/nx/actions/runs/16545241633/job/46791870646
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Aug 3, 2025

This pull request has already been merged/closed. If you experience issues related to these changes, please open a new issue referencing this pull request.

@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Aug 3, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants