Commit 6912ca9
committed
Bump
The vulnerability:
$ npm audit --audit-level=high
# npm audit report
form-data >=4.0.0 <4.0.4 || <2.5.4
Severity: critical
form-data uses unsafe random function in form-data for choosing boundary - GHSA-fjxv-7rqg-78g4
form-data uses unsafe random function in form-data for choosing boundary - GHSA-fjxv-7rqg-78g4
fix available via `npm audit fix`
node_modules/@azure/core-http/node_modules/form-data
node_modules/@types/node-fetch/node_modules/form-data
node_modules/form-data
1 critical severity vulnerability
To address all issues, run:
npm audit fix
This change is simply from running `npm audit fix`. It doesn't look like
`dependabot` previously raised any PRs for this dependency, so this
bumps it from `4.0.0` to `4.0.4`, see the changelog[1] for details.
Link: https://github.com/form-data/form-data/blob/v4.0.4/CHANGELOG.md [1]form-data to bring in fix for critical vulnerability1 parent 8e57b58 commit 6912ca9
3 files changed
+2616
-356
lines changed
0 commit comments