francismeynard / lambda-multipart-parser

This nodejs module will parse the multipart-form containing files and fields from the AWS lambda event object. It works very well parsing binary and text files.
MIT License
67 stars 25 forks source link

upgrade busboy to 1.6.0 #20

Closed darreal44 closed 1 year ago

darreal44 commented 1 year ago

Reasoning: busboy 0.3.0 depends of dicer 0.3.0 which has a vulnerability before 0.3.1: "This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. A complete denial of service can be achived by sending the malicious form in a loop."

jcjesus commented 1 year ago

Thanks @darreal44 , great job!