Skip to content

Commit 6912ca9

Browse files
Bump form-data to bring in fix for critical vulnerability
The vulnerability: $ npm audit --audit-level=high # npm audit report form-data >=4.0.0 <4.0.4 || <2.5.4 Severity: critical form-data uses unsafe random function in form-data for choosing boundary - GHSA-fjxv-7rqg-78g4 form-data uses unsafe random function in form-data for choosing boundary - GHSA-fjxv-7rqg-78g4 fix available via `npm audit fix` node_modules/@azure/core-http/node_modules/form-data node_modules/@types/node-fetch/node_modules/form-data node_modules/form-data 1 critical severity vulnerability To address all issues, run: npm audit fix This change is simply from running `npm audit fix`. It doesn't look like `dependabot` previously raised any PRs for this dependency, so this bumps it from `4.0.0` to `4.0.4`, see the changelog[1] for details. Link: https://github.com/form-data/form-data/blob/v4.0.4/CHANGELOG.md [1]
1 parent 8e57b58 commit 6912ca9

File tree

3 files changed

+2616
-356
lines changed

3 files changed

+2616
-356
lines changed

0 commit comments

Comments
 (0)